Function at 0x6baceec0
Capabilities:
Access the windows event log
Set current directory
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov rax, qword [0x6bb884c0]
cmp dword [rax], 0x58c1
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rdx
jle 0x6bacf57c
mov rax, qword [0x6bb87e90]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rbp, qword [0x6bb87f20]
mov r14, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov eax, dword [rax]
mov dword [rbp], eax
call r14
mov ecx, 0x5831542b
call fcn.6bad9930
mov rdi, qword [0x6bb885b0]
xor edx, edx
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_PurgeComm]
mov dword [rdi], eax
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Quidem_sapiente_est_sunt_quasi_dignissimos
mov qword [rsp + 0x38], rax
call rax
mov rax, qword [0x6bb886b0]
mov edx, dword [rax]
mov rax, qword [0x6bb88270]
mov dword [rax], edx
mov rax, qword [0x6bb87c60]
mov ecx, dword [rax]
call fcn.6bad9930
mov r13, qword [str.h__mz_aHV]
mov ecx, 0x7660dc48
mov rdi, qword [0x6bb885e0]
mov edx, dword [r13]
mov dword [rdi], eax
mov rax, qword [0x6bb880e0]
mov dword [rax], edx
mov rax, qword [0x6bb88380]
mov dword [rax], 0x8514af61
call fcn.6bad9930
mov rdx, qword [0x6bb88730]
mov r12, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.IzaiahKihn
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [sym.imp.KERNEL32.dll_ReplaceFileA]
xor r9d, r9d
lea r8, str.Natus_enim_quisquam_adipisci_sit
lea rdx, str.MrFrederickAdamsIV
lea rcx, str.Molestias_et_aliquam_molestiae_asperiores_maiores_velit_corrupti_quaerat_et
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x48], rax
call rax
xor edx, edx
xor ecx, ecx
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r14
mov ecx, 0x36a13382
call fcn.6bad9930
mov rdx, qword [0x6bb883a0]
mov rdi, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x6bb87bd0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rbx, qword [0x6bb885c0]
xor edx, edx
lea rcx, str.Laboriosam_eveniet_asperiores_aperiam_et
mov dword [rbx], eax
call r12
mov rax, qword [0x6bb87d40]
xor edx, edx
mov r15, qword [0x6bb87d70]
lea rcx, str.MissEstellJacobson
mov eax, dword [rax]
mov dword [r15], eax
call r12
mov r10, qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
lea rdx, str.Quisquam_sequi_totam_ullam
lea rcx, str.GildaLeannon
mov qword [rsp + 0x58], r10
call r10
xor edx, edx
mov rbx, qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x6bb883e0]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp], eax
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.ChristRowe
lea rcx, str.Animi_cupiditate_aut_occaecati_vel_fuga_veniam_officiis_dolore
call rbp
mov ecx, 0x831033e0
call fcn.6bad9930
mov rdx, qword [0x6bb87ba0]
lea rcx, str.Recusandae_inventore_est_ut
mov dword [rdx], eax
xor edx, edx
call r12
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r14
mov ecx, 0x44c8ffb2
call fcn.6bad9930
mov rdx, qword [0x6bb87f70]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov r12, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call r12
mov r11, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], r11
call r11
mov rax, qword [0x6bb87e50]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc3458b10
call rsi
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb87fa0]
mov ecx, dword [rax]
call fcn.6bad9930
mov dword [r13], eax
mov rax, qword [0x6bb88060]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87eb0]
mov r14, qword [0x6bb88220]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb87ff0]
mov dword [r14], 0xb0f3852f
mov edx, dword [rax]
mov rax, qword [0x6bb87d90]
mov dword [rax], edx
mov rax, qword [0x6bb885b0]
xor edx, edx
mov dword [rax], 0x7761b35c
call r12
mov ecx, 0x31498907
call fcn.6bad9930
mov rcx, qword [0x6bb886e0]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbx
lea rdx, str.DrErvinHagenesDDS
lea rcx, str.NiaGerlach
call rbp
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x6bb87d50]
mov ecx, 0xc749163c
mov eax, dword [rax]
mov dword [r14], eax
call fcn.6bad9930
mov rdx, qword [0x6bb88680]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
mov qword [rsp + 0x40], rax
call rax
mov ecx, 0x3f7437e4
call fcn.6bad9930
mov r14, qword [0x6bb87ca0]
mov ecx, 0xe699bea2
mov rdx, qword [0x6bb88050]
mov dword [rdx], eax
mov edx, dword [r14]
mov rax, qword [0x6bb88120]
mov dword [rax], edx
mov edx, dword [r15]
mov rax, qword [0x6bb87d00]
mov dword [rax], edx
call fcn.6bad9930
xor ecx, ecx
mov dword [r14], eax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x6bb87ee0]
mov rdx, qword [0x6bb880b0]
lea rcx, str.QuintenJonesIV
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb87fc0]
mov edx, dword [r14]
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x6bb88030]
mov dword [rax], edx
mov rax, qword [0x6bb88250]
mov edx, dword [rax]
mov rax, qword [0x6bb88280]
mov dword [rax], edx
mov rax, qword [rsp + 0x38]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0x37a03c1a
call fcn.6bad9930
mov rcx, qword [0x6bb88430]
mov dword [rcx], eax
mov rax, qword [0x6bb88140]
mov edx, dword [rax]
mov rax, qword [0x6bb87e40]
mov dword [rax], edx
mov rax, qword [0x6bb88060]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb885e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb88080]
xor edx, edx
mov dword [rax], 0xd0af8949
call r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov eax, dword [r13]
xor edx, edx
xor ecx, ecx
mov r14, qword [0x6bb88470]
mov r13, qword [0x6bb87e10]
mov r15, qword [0x6bb87c80]
mov dword [r14], eax
mov rax, qword [0x6bb88060]
mov dword [r15], 0x18c19c84
mov eax, dword [rax]
mov dword [r13], eax
call rdi
mov r11, qword [rsp + 0x50]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call r11
mov rax, qword [0x6bb87f80]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf2e1ceaf
mov rax, qword [0x6bb87e80]
mov dword [rax], 0x7194dc2
call rdi
mov rax, qword [0x6bb87c90]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb88600]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x6bb88610]
mov ecx, 0xad9a32cc
mov dword [rax], 0xf84f7879
call fcn.6bad9930
mov rdx, qword [0x6bb87e60]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x1d24607
call fcn.6bad9930
mov rdx, qword [0x6bb880f0]
lea rcx, str.MissYoshikoHyatt
mov dword [rdx], eax
lea rdx, str.NatalieCarter
call rbp
mov rax, qword [0x6bb87c50]
mov edx, dword [r13]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x6bb88010]
mov dword [rax], edx
xor edx, edx
call rsi
xor ecx, ecx
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
call r13
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call r12
lea rdx, str.MeaganBernier
lea rcx, str.Aut_nostrum_ab_aperiam_vel
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb88540]
mov rsi, qword [0x6bb87e50]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb885b0]
mov rsi, qword [0x6bb885c0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb87cf0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87ce0]
lea rcx, str.TatumBogisich
mov dword [rdx], eax
mov rax, qword [rsp + 0x38]
call rax
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb88100]
mov rdi, qword [0x6bb880b0]
xor ecx, ecx
mov dword [rax], 0xa76bccd8
mov rax, qword [0x6bb87f00]
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x6bb87cd0]
mov edx, dword [rax]
mov rax, qword [0x6bb87f30]
mov dword [rax], edx
mov rax, qword [0x6bb88620]
mov dword [rax], 0xce5f5d32
mov rax, qword [0x6bb886e0]
mov dword [rax], 0xc5b9a1f6
mov rax, qword [0x6bb882a0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb88040]
mov rdi, qword [0x6bb87bd0]
mov dword [rax], 0xa4c87d7c
mov rax, qword [0x6bb883f0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb88430]
mov dword [rax], 0x3e9bf8e
mov rax, qword [0x6bb883c0]
mov edx, dword [rax]
mov rax, qword [0x6bb88560]
mov dword [rax], edx
call r13
xor r9d, r9d
mov rax, qword [rsp + 0x48]
lea r8, str.OpalDouglas
lea rdx, str.Nihil_tempore_tempora_exercitationem_ut_consectetur_facere
lea rcx, str.Alias_animi_voluptas_dolorem_quo_necessitatibus
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
xor ecx, ecx
xor edx, edx
call rbx
xor edx, edx
xor ecx, ecx
call rbx
mov r10, qword [rsp + 0x58]
lea rdx, str.ProfAngelitaParkerJr
lea rcx, str.QuentinRunolfsson
call r10
mov rax, qword [0x6bb884c0]
cmp dword [rax], 0x34a6
jle 0x6bacfcfb
mov r12, qword [sym.imp.KERNEL32.dll_ReplaceFileA]
xor r9d, r9d
lea r8, str.Nam_enim_occaecati_nobis
lea rdx, str.Est_doloribus_saepe_nostrum_ab_laborum_impedit_assumenda_dolorum
mov qword [rsp + 0x28], 0
lea rcx, str.MissChelsieFlatleySr
mov qword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb88240]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88370]
xor r9d, r9d
lea r8, str.ShanelHickle
lea rcx, str.Architecto_maxime_et_iure
mov dword [rdx], eax
mov rax, qword [0x6bb87c00]
lea rdx, str.DiannaHaley
mov dword [rax], 0x420f87af
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call r12
mov r13, qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
lea rdx, str.KeeleyKling
lea rcx, str.Autem_omnis
call r13
mov rbp, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Inventore_facilis_molestiae_voluptatibus_aliquam_nobis
call rbp
mov rax, qword [str.h__mz_aHV]
mov rdi, qword [0x6bb88730]
mov dword [rax], 0xc332d57e
mov rax, qword [0x6bb87f40]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb87e80]
mov edx, dword [rax]
mov rax, qword [0x6bb88290]
mov dword [rax], edx
mov rax, qword [0x6bb87ee0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb880c0]
mov rdi, qword [0x6bb87e70]
xor ecx, ecx
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov dword [rdx], eax
mov rax, qword [0x6bb880d0]
mov dword [rax], 0xad3d0805
mov rax, qword [0x6bb88360]
mov eax, dword [rax]
mov dword [rdi], eax
call rbx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x38], rax
call rax
mov ecx, 0xdacc72a7
call fcn.6bad9930
mov rdi, qword [0x6bb886d0]
xor r9d, r9d
lea r8, str.Quae_voluptatibus_voluptas_qui_perspiciatis_atque_architecto
lea rdx, str.GisselleFisher
lea rcx, str.Inventore_ea_reiciendis_sed_dolorem_voluptatem
mov dword [rdi], eax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb88440]
xor r8d, r8d
xor edx, edx
mov rsi, qword [0x6bb885b0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rsi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
call rsi
mov rax, qword [0x6bb88250]
mov r14, qword [0x6bb882d0]
mov ecx, 0x5d34107a
mov dword [rax], 0xa4cdcdca
mov rax, qword [0x6bb88650]
mov eax, dword [rax]
mov dword [r14], eax
call fcn.6bad9930
mov rcx, qword [0x6bb87cb0]
mov r15, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
mov dword [rcx], eax
mov rax, qword [0x6bb87f10]
lea rcx, str.Fuga_nobis_dolorum_et_ducimus_eius_similique_accusantium_non
mov dword [rax], 0x1c3baeb6
call r15
mov ecx, 0x28727aea
call fcn.6bad9930
mov rdx, qword [0x6bb87c60]
mov ecx, 0x2a8bb501
mov dword [rdx], eax
call fcn.6bad9930
mov rdx, qword [0x6bb87d50]
mov ecx, 0xf15e8a82
mov dword [rdx], eax
call fcn.6bad9930
mov rcx, qword [0x6bb87fc0]
mov dword [rcx], eax
mov ecx, 0x133e3e22
call fcn.6bad9930
mov rdx, qword [0x6bb87f80]
mov dword [rdx], eax
mov rax, qword [0x6bb87ca0]
mov edx, dword [rax]
mov rax, qword [0x6bb885e0]
mov dword [rax], edx
mov rax, qword [0x6bb87cf0]
mov edx, dword [rax]
mov rax, qword [0x6bb87c10]
mov dword [rax], edx
mov rax, qword [0x6bb88420]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb882f0]
mov dword [rcx], eax
mov rax, qword [0x6bb88600]
mov ecx, dword [rax]
call fcn.6bad9930
mov ecx, dword [rdi]
mov dword [r14], eax
call fcn.6bad9930
mov rdx, qword [0x6bb88580]
mov rdi, qword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov dword [rdx], eax
mov rax, qword [0x6bb88530]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2c59732
call rdi
mov rax, qword [0x6bb88130]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x9cb81265
call rdi
mov rax, qword [0x6bb88660]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87ed0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov r14, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
lea rdx, str.ProfLupeLarson
lea rcx, str.Quam_fuga_optio_aperiam_omnis_et_totam_dolore_ut_non_illo_veniam_reprehenderit_aliquam
call r13
xor ecx, ecx
call rbx
mov rax, qword [0x6bb88440]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb88750]
mov dword [rax], edx
call r14
mov rax, qword [str.32_]
mov rdx, qword [0x6bb87cb0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rdi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb87eb0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2a9edfe5
mov rax, qword [rsp + 0x38]
call rax
mov rax, qword [0x6bb87fc0]
mov edx, dword [rax]
mov rax, qword [0x6bb87cc0]
mov dword [rax], edx
mov rax, qword [0x6bb87c90]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x38d5a827
call qword [sym.imp.KERNEL32.dll_PurgeComm]
mov rax, qword [0x6bb883d0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb882c0]
xor r9d, r9d
lea r8, str.HayleeSawayn
lea rcx, str.AlbertaWatsica
mov dword [rdx], eax
mov rax, qword [0x6bb88600]
lea rdx, str.Eos_in_possimus_doloremque_et_eius
mov dword [rax], 0xa1b39589
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call r12
lea rcx, str.MrHarveyHaley
call rbp
xor ecx, ecx
call r14
lea rdx, str.MissBernadetteChamplinII
lea rcx, str.LacyKuvalisIII
call r13
mov ecx, 0x2bfab1f3
call fcn.6bad9930
mov rdx, qword [0x6bb88220]
mov ecx, 0xb2cbe299
mov dword [rdx], eax
call fcn.6bad9930
mov rdx, qword [0x6bb87e20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb88070]
mov edx, dword [rax]
mov rax, qword [0x6bb88680]
mov dword [rax], edx
call rbx
mov rax, qword [0x6bb87bb0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87dd0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov r12, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x6bb88420]
mov rcx, qword [0x6bb87f10]
mov r14, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb88490]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb87da0]
mov dword [rax], edx
mov rax, qword [0x6bb88120]
mov dword [rax], 0x17e71728
call r14
lea rcx, str.Natus_et_temporibus_deserunt_reprehenderit_sed_ut_delectus_labore_corporis
call rbp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
lea rcx, str.Est_dolores_velit_animi
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov r11, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.GretchenGoodwin
lea rcx, str.SylvesterMcLaughlin
mov qword [rsp + 0x48], r11
call r11
mov r10, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], r10
call r10
mov ecx, 0x7dbaa415
call fcn.6bad9930
mov rdx, qword [0x6bb88380]
lea rcx, str.MagdalenaHeathcote
mov dword [rdx], eax
xor edx, edx
call r15
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb87fb0]
xor ecx, ecx
mov dword [rax], 0x223bc033
call rbx
lea rdx, str.Amet_sit_aut_et_qui_omnis_reprehenderit_sapiente_aperiam_inventore
lea rcx, str.Voluptas_voluptatum_omnis_et
call r13
xor ecx, ecx
call r14
mov rax, qword [0x6bb88730]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xbbc7d9f5
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov rax, qword [0x6bb88300]
mov ecx, dword [rax]
call fcn.6bad9930
mov rsi, qword [0x6bb87e80]
mov dword [rsi], eax
mov rax, qword [0x6bb88320]
mov dword [rax], 0xa6a32085
mov rax, qword [0x6bb880a0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87bd0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x6bb882f0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88140]
mov ecx, 0xecb5b373
mov rsi, qword [0x6bb87fa0]
mov dword [rdx], eax
mov dword [rsi], 0x245c339d
call fcn.6bad9930
mov r12, qword [0x6bb88700]
mov dword [r12], eax
mov rax, qword [0x6bb87e40]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87eb0]
mov dword [rdx], eax
mov rax, qword [0x6bb87f40]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87df0]
mov r10, qword [rsp + 0x40]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r10
mov edx, dword [r12]
mov rax, qword [0x6bb883f0]
lea rcx, str.Non_distinctio_aspernatur_quaerat_suscipit_harum
mov r12, qword [0x6bb88640]
mov dword [rax], edx
mov rax, qword [0x6bb88360]
mov eax, dword [rax]
mov dword [r12], eax
mov rax, qword [0x6bb87ba0]
mov edx, dword [rax]
mov rax, qword [0x6bb88450]
mov dword [rax], edx
call rbp
mov ecx, 0x2c119e15
call fcn.6bad9930
mov rdx, qword [0x6bb87e00]
mov rcx, qword [0x6bb885b0]
mov dword [rdx], eax
mov rax, qword [0x6bb87c60]
mov dword [rax], 0xc6bb5b33
mov rax, qword [0x6bb88000]
mov dword [rax], 0x9f09b358
mov rax, qword [0x6bb88110]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb88440]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb88470]
mov dword [rax], edx
call r14
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb88660]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb87cd0]
mov dword [rax], edx
call rbx
xor edx, edx
lea rcx, str.ChetHyatt
call r15
xor ecx, ecx
call rbx
mov rax, qword [0x6bb87cb0]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x6bb87f80]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x6bb88120]
mov dword [rax], 0xc94f4d7a
mov rax, qword [rsp + 0x38]
call rax
mov rax, qword [0x6bb87c40]
mov ecx, 0x6d24c215
mov edx, dword [rax]
mov rax, qword [0x6bb88460]
mov dword [rax], edx
call fcn.6bad9930
mov rdi, qword [0x6bb87e70]
mov r11, qword [rsp + 0x48]
lea rdx, str.RamonaGrimes
lea rcx, str.LaurenHeaney
mov dword [rdi], eax
mov rax, qword [0x6bb880e0]
mov eax, dword [rax]
mov dword [r12], eax
call r11
xor edx, edx
lea rcx, str.AlyssonCremin
call r15
mov dword [rsi], 0xf018a6d
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r10, rax
test rax, rax
jne 0x6bacfd19
xor r10d, r10d
jmp 0x6bad1027
mov rax, qword [0x6bb884c0]
cmp dword [rax], 0x8c59
jle 0x6bad0431
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov qword [rsp + 0x60], r10
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x38], rax
call rax
mov rax, qword [0x6bb88330]
mov edx, dword [rax]
mov rax, qword [0x6bb88550]
mov dword [rax], edx
mov rax, qword [0x6bb87f00]
mov ecx, dword [rax]
call fcn.6bad9930
mov rbx, qword [0x6bb882f0]
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov ecx, 0xc4aac3da
call fcn.6bad9930
mov rdx, qword [0x6bb880e0]
mov rdi, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x6bb88030]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87e80]
mov rsi, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.Aut_officiis_unde_ut_et_beatae
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x6bb87dd0]
mov ecx, 0xd5cad931
mov dword [rax], 0xdc6c071f
call fcn.6bad9930
mov rdx, qword [0x6bb87c60]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb87f30]
mov rdx, qword [0x6bb87d20]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbx
mov r15, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call r15
mov rax, qword [0x6bb88460]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88450]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xor edx, edx
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
lea rdx, str.Accusantium_architecto_deserunt_nostrum_aut_saepe_numquam_mollitia_molestiae_optio_non
lea rcx, str.LloydHomenickI
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb88510]
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov dword [rax], 0x28339bdd
call r13
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call r15
mov rax, qword [0x6bb87e40]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb87c90]
mov dword [rax], edx
mov rax, qword [0x6bb87d00]
xor edx, edx
mov dword [rax], 0x2a61bb5d
mov rax, qword [0x6bb87c00]
mov dword [rax], 0x688e1b1f
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov rbp, qword [0x6bb87f40]
xor edx, edx
mov rax, qword [0x6bb88690]
lea rcx, str.BayleeLarson
mov dword [rbp], 0x82d3a55b
mov dword [rax], 0x7644da90
call rsi
mov ecx, 0x593edf18
call fcn.6bad9930
mov rcx, qword [0x6bb87dc0]
mov dword [rcx], eax
mov rax, qword [0x6bb884a0]
xor ecx, ecx
mov dword [rax], 0xc0e313b7
mov rax, qword [0x6bb87bb0]
mov edx, dword [rax]
mov rax, qword [0x6bb882b0]
mov dword [rax], edx
xor edx, edx
call rbx
mov rax, qword [0x6bb88270]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xbf725ef0
call rdi
mov ecx, 0x1297beb5
call fcn.6bad9930
mov rdx, qword [str.h__mz_aHV]
mov r12, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Eum_qui_tempora_itaque_magni_et_nihil_ipsa
mov dword [rdx], eax
call r12
mov rax, qword [0x6bb87db0]
mov rcx, qword [0x6bb88240]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
mov r14, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
call r14
mov dword [rbp], 0xf26d9423
lea rdx, str.MsEffieAdams
lea rcx, str.MsNelleZiemeIII
mov rax, qword [rsp + 0x48]
call rax
mov r11, qword [sym.imp.KERNEL32.dll_ReplaceFileA]
xor r9d, r9d
lea r8, str.OfeliaQuigley
lea rdx, str.Voluptatem_cum_ducimus_fugiat_rem_et_quis_accusantium_hic
lea rcx, str.Qui_et_mollitia_reiciendis_numquam_repudiandae_provident_omnis_et
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x58], r11
mov qword [rsp + 0x20], 0
call r11
mov rbp, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call rbp
lea rdx, str.XavierUllrich
lea rcx, str.JustineWisozk
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xor ecx, ecx
call r15
mov rax, qword [0x6bb87d80]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88250]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb87d50]
mov rdx, qword [0x6bb87f00]
mov dword [rax], 0x80e79f26
mov rax, qword [0x6bb880a0]
mov dword [rax], 0xeab6a1a5
mov rax, qword [0x6bb88120]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbx
xor ecx, ecx
call r13
mov ecx, 0x5b19abef
call fcn.6bad9930
mov rdx, qword [0x6bb87c50]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x6bb87bc0]
mov rcx, qword [0x6bb87c10]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.Maiores_enim_omnis_sit_cupiditate_aut_reiciendis_qui_consequatur
call rsi
mov rax, qword [0x6bb88420]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x8915ac2e
mov rax, qword [rsp + 0x38]
call rax
xor edx, edx
lea rcx, str.MissMiaPriceSr
call rsi
mov r13, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call r13
mov rax, qword [0x6bb885a0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87dc0]
lea rcx, str.Odit_voluptas_delectus_quibusdam_laudantium_harum_sint_vero_fugit
mov dword [rdx], eax
mov rax, qword [0x6bb884b0]
mov dword [rax], 0x3609729
call r12
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call r13
mov rax, qword [0x6bb87d30]
mov rcx, qword [0x6bb880a0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r13
lea rcx, str.AlexJohnson
call r12
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0xdf9136f5
call fcn.6bad9930
mov rdx, qword [0x6bb88240]
mov dword [rdx], eax
mov rax, qword [0x6bb87fd0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb880c0]
mov dword [rcx], eax
mov rax, qword [0x6bb87f80]
mov ecx, 0xceaa81ad
mov dword [rax], 0x9912daed
mov rax, qword [0x6bb87ef0]
mov dword [rax], 0x620c769b
call fcn.6bad9930
mov rdx, qword [0x6bb87ca0]
xor ecx, ecx
mov dword [rdx], eax
call r13
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call r13
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
lea rcx, str.Quos_tenetur_quas_iusto
call rsi
mov rax, qword [0x6bb87dc0]
mov rdx, qword [0x6bb87e70]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb885a0]
mov edx, dword [rax]
mov rax, qword [0x6bb87f60]
mov dword [rax], edx
mov rax, qword [0x6bb87c40]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88600]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x6bb883d0]
mov r13, qword [0x6bb87ff0]
mov dword [rax], 0x865cc42a
mov rax, qword [0x6bb88680]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x6bb883a0]
mov edx, dword [rax]
mov rax, qword [0x6bb87f20]
mov dword [rax], edx
mov rax, qword [0x6bb87dd0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88560]
lea rcx, str.Quod_tempora_est_molestiae_ut_vel_mollitia_ea_et_consequatur_ea_maiores_et_labore
mov dword [rdx], eax
call r12
xor edx, edx
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x6bb885a0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb880a0]
mov dword [rcx], eax
mov ecx, 0x5a0bc5d0
call fcn.6bad9930
mov rdx, qword [0x6bb87c10]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x6bb882f0]
mov rbx, qword [0x6bb87ef0]
lea rdx, str.Omnis_ut_qui_molestias_sunt_sed_harum_impedit_sed
lea rcx, str.In_est_aut_dolorem_adipisci_deserunt_libero_beatae
mov dword [rax], 0x86f3b302
mov rax, qword [0x6bb88590]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x48]
call rax
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb88100]
mov ecx, 0x4eb92bcc
mov dword [rax], 0xd183dde0
call fcn.6bad9930
mov rdi, qword [str.h__mz_aHV]
lea rcx, str.RupertWintheiser
mov dword [rdi], eax
call r12
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r15
xor ecx, ecx
call r15
mov rax, qword [0x6bb88090]
mov dword [rax], 0x10d1ff51
mov rax, qword [0x6bb880d0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdi, qword [0x6bb87f00]
xor edx, edx
lea rcx, str.NettiePollich
mov dword [rdi], eax
mov rax, qword [0x6bb880f0]
mov dword [rax], 0xbc6a0e03
call rsi
mov rbx, qword [0x6bb88270]
mov eax, dword [r13]
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
call r14
mov rax, qword [0x6bb880c0]
mov ecx, 0x1383126c
mov dword [rax], 0x2d9286f6
call fcn.6bad9930
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb87e20]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], 0
call rax
mov r11, qword [rsp + 0x58]
xor r9d, r9d
lea r8, str.Nobis_ut_asperiores_sit_eos_labore_fugit_tempora
lea rdx, str.Soluta_doloribus_officiis_placeat_iure
lea rcx, str.Inventore_deserunt_quo_reprehenderit_officiis_in_aut_deleniti
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call r11
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb88000]
mov rdi, qword [0x6bb87d20]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb87cb0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rbx, qword [0x6bb87e70]
xor edx, edx
lea rcx, str.At_eius_quidem_numquam
mov dword [rbx], eax
call rsi
xor ecx, ecx
call rbp
mov rax, qword [0x6bb885f0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88020]
mov r10, qword [rsp + 0x60]
mov dword [rdx], eax
mov rax, qword [0x6bb87d00]
mov dword [rax], 0x6deb08a6
mov rcx, r10
mov rdx, qword [rsp + 0xc8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r10, rax
mov rax, qword [0x6bb884c0]
cmp dword [rax], 0
je 0x6bad101e
mov ecx, 0x680298d
mov qword [rsp + 0x68], r10
call fcn.6bad9930
mov rdi, qword [0x6bb88310]
mov rbx, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov dword [rdi], eax
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call rbp
mov rsi, qword [0x6bb87ba0]
mov rax, qword [0x6bb87eb0]
mov ecx, dword [rsi]
mov dword [rax], 0xf3017094
call fcn.6bad9930
mov r15, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.HarrisonDavis
mov dword [rsi], eax
call r15
mov rax, qword [0x6bb87cb0]
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov dword [rax], 0x171367e7
mov rax, qword [0x6bb883b0]
mov edx, dword [rax]
mov rax, qword [0x6bb88080]
mov dword [rax], edx
call rsi
xor ecx, ecx
call rsi
mov rax, qword [0x6bb87f80]
mov rdi, qword [0x6bb884b0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
call rsi
mov rax, qword [0x6bb87d00]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdi, qword [0x6bb87ff0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb87d70]
mov r12, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.JarredKeebler
lea rcx, str.Ut_voluptatem_blanditiis_numquam
mov dword [rax], 0x62d8882d
call r12
mov rax, qword [0x6bb885d0]
xor ecx, ecx
mov dword [rax], 0x8307f67b
mov rax, qword [0x6bb88000]
mov edx, dword [rax]
mov rax, qword [0x6bb87bb0]
mov dword [rax], edx
call rsi
xor ecx, ecx
call rbx
xor ecx, ecx
call rsi
mov r14, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.CorrineFahey
call r14
mov rax, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor ecx, ecx
xor edx, edx
mov qword [rsp + 0x50], rax
call rax
xor edx, edx
lea rcx, str.Hic_delectus_commodi_beatae_inventore_ad
call r14
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
lea rdx, str.WyattGulgowskiPhD
lea rcx, str.GreggFarrell
call r12
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_ReplaceFileA]
xor r9d, r9d
lea r8, str.Amet_laudantium_est_et
lea rdx, str.Eum_cupiditate_sed
lea rcx, str.LornaAltenwerth
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x38], rax
call rax
mov rax, qword [0x6bb88280]
mov rdi, qword [0x6bb88390]
lea rcx, str.Distinctio_tempore_ratione_non_consequuntur_distinctio_eius
mov edx, dword [rax]
mov dword [rax], 0x4fe08353
mov rax, qword [0x6bb88010]
mov dword [rdi], edx
mov rdi, qword [0x6bb87ff0]
lea rdx, str.AnaisHickle
mov eax, dword [rax]
mov dword [rdi], eax
call r12
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rsi
xor ecx, ecx
call rbx
xor r9d, r9d
mov rdi, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
xor r8d, r8d
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x6bb87e70]
mov rcx, qword [0x6bb87d40]
mov r13, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov edx, dword [rax]
mov rax, qword [0x6bb87c20]
mov dword [rax], edx
mov rax, qword [0x6bb88030]
xor edx, edx
mov dword [rax], 0x4573ce0b
mov rax, qword [0x6bb87dc0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r13
mov rax, qword [0x6bb88330]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87c30]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb883d0]
xor r9d, r9d
lea r8, str.Necessitatibus_placeat_iure_maiores_et
lea rdx, str.Quia_alias_voluptates_molestiae_rem_error_id_sit_quia
lea rcx, str.SusanaCremin
mov dword [rax], 0x2b23ca44
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
lea rdx, str.Velit_vitae_id_nihil_placeat
lea rcx, str.ProfIsomHaneDVM
call r12
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x6bb883a0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rax], 0x523b60eb
mov rax, qword [0x6bb88440]
mov dword [rax], 0xe8c665a9
mov rax, qword [0x6bb87d00]
mov edx, dword [rax]
mov rax, qword [0x6bb87c70]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x20], 0
call rdi
mov rax, qword [0x6bb87ff0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88240]
mov ecx, 0x9df70907
mov dword [rdx], eax
call fcn.6bad9930
mov rcx, qword [0x6bb88450]
mov dword [rcx], eax
lea rcx, str.KellenKing
call r15
xor ecx, ecx
call rsi
mov rax, qword [0x6bb87d50]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rax], 0x69b16cc0
mov rax, qword [0x6bb87bf0]
mov edx, dword [rax]
mov rax, qword [0x6bb88070]
mov dword [rax], edx
mov rax, qword [0x6bb88440]
xor edx, edx
mov dword [rax], 0x2211f4a1
mov qword [rsp + 0x20], 0
call rdi
xor edx, edx
lea rcx, str.PrestonSchneider
call r14
mov rax, qword [0x6bb88660]
mov rdx, qword [0x6bb88500]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb885d0]
mov edx, dword [rax]
mov rax, qword [0x6bb87fd0]
mov dword [rax], edx
call rbx
xor r9d, r9d
lea r8, str.Qui_laudantium_qui_officia_neque_exercitationem_dolore_quam_est
lea rdx, str.Itaque_veniam_sequi_voluptatum_vitae_consequuntur_vel_eius_quis
lea rcx, str.Accusantium_rerum_ut_labore_perferendis_dolore
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb88400]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb88500]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0x11237e20
call fcn.6bad9930
mov r8, qword [0x6bb87c00]
mov ecx, 0xabb41d6c
mov rdx, qword [0x6bb88740]
mov dword [rdx], eax
mov edx, dword [r8]
mov rax, qword [0x6bb87e20]
mov dword [rax], edx
call fcn.6bad9930
mov rdx, qword [0x6bb884b0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x6bb87cb0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x97354780
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x6bb87c30]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87f20]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x6bb88550]
mov ecx, dword [rax]
call fcn.6bad9930
mov r8, qword [0x6bb87c00]
xor edx, edx
xor ecx, ecx
mov dword [r8], eax
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x6bb882b0]
mov ecx, 0xc0a64ce0
mov dword [rax], 0x20af18b
call fcn.6bad9930
mov rdx, qword [0x6bb88640]
mov r10, qword [rsp + 0x68]
mov dword [rdx], eax
test r10, r10
je 0x6bacfd11
mov rax, qword [0x6bb884c0]
cmp dword [rax], 0
je 0x6bad1027
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], 0
call rdi
mov rax, qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
lea rdx, str.Tempora_vel_placeat_eius_perferendis
lea rcx, str.MireyaBins
mov qword [rsp + 0x60], rax
call rax
xor r9d, r9d
lea r8, str.DrClayVonRueden
lea rdx, str.CitlalliHermann
lea rcx, str.MrsMistyLedner
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov r11, qword [0x6bb87c90]
mov rcx, qword [0x6bb87d00]
mov eax, dword [r11]
mov dword [rcx], eax
mov rax, qword [0x6bb883e0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87d10]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb882d0]
xor edx, edx
mov dword [rax], 0x6bf510f5
mov rax, qword [0x6bb880f0]
mov dword [rax], 0xd51ebd2
call r13
xor ecx, ecx
call rsi
mov rax, qword [0x6bb87d00]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb87de0]
mov dword [rax], edx
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov r11, qword [0x6bb87c90]
mov rax, qword [0x6bb87ce0]
lea rcx, str.Incidunt_et_molestias_sed_et_sed_non_placeat_quia_sed_qui
mov edx, dword [r11]
mov dword [rax], edx
lea rdx, str.Voluptas_minus_est_et_accusamus_eum
call r12
xor edx, edx
xor ecx, ecx
call r13
xor edx, edx
lea rcx, str.ConsueloJohns
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb88260]
mov edx, dword [rax]
mov rax, qword [0x6bb885b0]
mov dword [rax], edx
mov rax, qword [0x6bb87d80]
mov rdx, qword [0x6bb87bf0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb87ca0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb87df0]
mov dword [rcx], eax
mov ecx, 0x74ef6080
call fcn.6bad9930
mov rdx, qword [0x6bb87d40]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb88580]
xor edx, edx
lea rcx, str.Eaque_et_ad_reiciendis_ad
mov dword [rax], 0xf69000d0
call r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call rdi
xor ecx, ecx
call rbp
mov rax, qword [0x6bb87df0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rsi, qword [0x6bb87f00]
mov dword [rsi], eax
mov rax, qword [0x6bb88390]
mov ecx, dword [rax]
call fcn.6bad9930
mov rsi, qword [0x6bb884b0]
xor ecx, ecx
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor edx, edx
xor ecx, ecx
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call rdi
mov r14, qword [0x6bb88750]
mov rsi, qword [0x6bb88440]
lea rdx, str.Facilis_ipsa_sed_minima_unde_ullam_omnis
lea rcx, str.MsRoxanneMaggio
mov eax, dword [r14]
mov dword [rsi], eax
call r12
mov rax, qword [0x6bb87bf0]
mov rsi, qword [0x6bb88220]
lea rdx, str.Est_est_porro_amet
lea rcx, str.Natus_veritatis_animi_in
mov dword [rax], 0x516e63e0
mov rax, qword [0x6bb88480]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x6bb88260]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb88410]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x20], 0
call rdi
mov rax, qword [0x6bb880c0]
mov r13, qword [0x6bb87f70]
mov ecx, 0x48cfcee1
mov dword [rax], 0x2cf21277
mov rax, qword [0x6bb882c0]
mov edx, dword [rax]
mov rax, qword [0x6bb87ee0]
mov dword [rax], edx
mov rax, qword [0x6bb88060]
mov eax, dword [rax]
mov dword [r13], eax
call fcn.6bad9930
mov rdx, qword [0x6bb87ea0]
mov rsi, qword [str.h__mz_aHV]
lea rcx, str.SusanaMaggio
mov dword [rdx], eax
mov rax, qword [0x6bb88310]
mov eax, dword [rax]
mov dword [rsi], eax
call r15
mov rax, qword [0x6bb885d0]
xor ecx, ecx
mov dword [rax], 0xbf18571c
call rbp
mov rax, qword [0x6bb88690]
mov dword [rax], 0x3073a7d7
mov rax, qword [0x6bb88650]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88350]
mov ecx, 0xb24600e5
mov dword [rdx], eax
call fcn.6bad9930
mov rsi, qword [0x6bb88440]
mov dword [rsi], eax
mov rax, qword [0x6bb88120]
mov ecx, dword [rax]
call fcn.6bad9930
mov rsi, qword [0x6bb87fe0]
mov ecx, 0x51bf63dc
mov dword [rsi], eax
mov rax, qword [0x6bb88000]
mov dword [rax], 0x743c4350
call fcn.6bad9930
lea rcx, str.NewtonMraz
mov dword [r13], eax
call r15
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb88040]
mov rcx, qword [0x6bb88050]
xor r9d, r9d
lea r8, str.Sed_harum_et_eaque_autem
lea rdx, str.Ipsum_autem_et_dolores_debitis_quo_omnis_debitis_esse_voluptates_quia_qui_nesciunt
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb88100]
lea rcx, str.Occaecati_quasi_blanditiis_a_dolor
mov dword [rax], 0xd2b61547
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb88710]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87ef0]
mov ecx, 0xf438f62e
mov dword [rdx], eax
call fcn.6bad9930
mov rdx, qword [0x6bb87e90]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb882f0]
mov eax, dword [rax]
mov dword [r14], eax
call rbp
mov rax, qword [0x6bb880d0]
mov r13, qword [0x6bb88510]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb88020]
mov dword [r13], 0x37ad1ea3
mov dword [rax], edx
mov rax, qword [0x6bb88320]
xor edx, edx
mov dword [rax], 0x712ccf43
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb88500]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0xe6c11d6e
call fcn.6bad9930
mov rsi, qword [0x6bb87f80]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [rsp + 0x48]
call rax
mov rsi, qword [0x6bb880e0]
mov ecx, dword [rsi]
call fcn.6bad9930
mov rdx, qword [0x6bb88450]
xor r9d, r9d
lea r8, str.Est_id_autem_eum_at_distinctio
lea rcx, str.Ipsum_non_repellendus
mov dword [rdx], eax
mov rax, qword [0x6bb87d80]
mov edx, dword [rax]
mov rax, qword [0x6bb886d0]
mov dword [rax], edx
lea rdx, str.Molestiae_dolor_dignissimos_optio_molestiae_reprehenderit_sapiente
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb87bd0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb883a0]
mov dword [rcx], eax
mov ecx, 0xc32680f4
call fcn.6bad9930
mov rdx, qword [0x6bb87d30]
xor ecx, ecx
mov dword [rdx], eax
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call rbx
xor ecx, ecx
call rbp
mov r11, qword [0x6bb87c90]
mov rax, qword [0x6bb88630]
lea rdx, str.Quia_autem_et_et_dolores_voluptas_ducimus_nam_quis_repellat
lea rcx, str.Et_ad_autem_perferendis_a_possimus
mov dword [r11], 0x480de42d
mov dword [rax], 0x5af6fb92
mov rax, qword [rsp + 0x60]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
lea rdx, str.Eum_nisi_labore_nostrum_omnis_rerum_officia_beatae_ut_repudiandae_dolores
lea rcx, str.KameronCruickshank
mov rax, qword [rsp + 0x60]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call rdi
lea rcx, str.Ea_ullam_et_quas_sunt
call r15
xor ecx, ecx
call rbx
mov rax, qword [0x6bb88460]
lea rcx, str.SharonKassulke
mov edx, dword [rax]
mov rax, qword [0x6bb87e50]
mov dword [rax], edx
lea rdx, str.Temporibus_eligendi_eum_voluptas
call r12
mov rax, qword [0x6bb88490]
mov ecx, dword [rax]
call fcn.6bad9930
mov rbx, qword [0x6bb88220]
mov ecx, 0x552bdf1c
mov dword [rbx], eax
mov rax, qword [str.h__mz_aHV]
mov rbx, qword [0x6bb87f00]
mov eax, dword [rax]
mov dword [rbx], eax
call fcn.6bad9930
mov rdx, qword [0x6bb886e0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb87d20]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x6bb88050]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x50]
call rax
mov ecx, dword [r13]
call fcn.6bad9930
mov rdx, qword [0x6bb88130]
xor r9d, r9d
lea r8, str.Ab_voluptatem_ad_est_ex_praesentium_cum
lea rcx, str.Facilis_aut_perferendis_eius_maiores
mov dword [rdx], eax
lea rdx, str.ShyannBeierIII
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
lea rcx, str.Ratione_perspiciatis_vero_ut_eveniet_ipsa
call r15
lea rdx, str.Id_non_in_alias_non_mollitia
lea rcx, str.Possimus_eum_repellat_tenetur_quia_rerum_consequatur_aut_dicta_praesentium
mov dword [rsi], 0xc4e9bd18
call r12
lea rcx, str.Et_dolore_velit_expedita_consequuntur_soluta
call r15
mov r10, qword [rsp + 0x68]
jmp 0x6bad1027
test r10, r10
je 0x6bacfd11
mov rax, r10
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret