Function at 0x6bad0c06
Capabilities:
Access the windows event log
Clear windows event logs
Set current directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov rax, qword [0x6bb85d20]
cmp dword [rax], 0x971a
mov qword [rsp + 0xa0], rcx
mov r10, rdx
jne 0x6bad1325
mov rbx, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0xa8], rdx
lea rcx, str.Nulla_quas_atque_ducimus_numquam
call rbx
lea rcx, str.KobeMcGlynn
call rbx
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov r13, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r13
mov rax, qword [0x6bb853a0]
mov r14, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Voluptas_id_nisi_qui_quod_id
mov dword [rax], 0xa56563f8
call r14
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rdi
xor ecx, ecx
call r13
mov rax, qword [0x6bb85ed0]
mov r15, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb85400]
mov dword [rax], edx
lea rdx, str.Quasi_ut_cum_aperiam_incidunt
call r15
lea rcx, str.MrTerrellKozey
call rbx
lea rcx, str.MissCourtneyGoyette
call r14
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x6bb856a0]
mov edx, dword [rax]
mov rax, qword [0x6bb85aa0]
mov dword [rax], edx
mov rax, qword [0x6bb85460]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb85c60]
mov dword [rdx], eax
mov rax, qword [0x6bb85880]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb85fc0]
mov rcx, qword [0x6bb85cf0]
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov dword [rdx], eax
mov rax, qword [0x6bb85730]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb85a70]
xor ecx, ecx
mov dword [rax], 0x5e9f6cc4
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call rsi
xor ecx, ecx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.AbigailReichel
mov qword [rsp + 0x38], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call rsi
mov r12, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.EverettFeil
lea rcx, str.Molestiae_eos_enim_ab
call r12
mov rax, qword [0x6bb857b0]
xor ecx, ecx
mov dword [rax], 0xb62f5f6a
mov rax, qword [0x6bb854e0]
mov edx, dword [rax]
mov rax, qword [0x6bb85470]
mov dword [rax], edx
xor edx, edx
call rbp
mov rax, qword [0x6bb85bb0]
mov rcx, qword [0x6bb85be0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r13
mov ecx, 0x7b4e5381
call fcn.6bad7ff0
mov rdx, qword [0x6bb858c0]
xor ecx, ecx
mov dword [rdx], eax
call rdi
lea rcx, str.Blanditiis_optio_aut_veritatis_sequi
call rbx
mov ecx, 0x24d158d8
call fcn.6bad7ff0
mov r11, qword [0x6bb85900]
mov rcx, qword [0x6bb85690]
lea r8, str.Porro_dignissimos_atque_aut_est_delectus_nam
mov edx, dword [r11]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [0x6bb85660]
mov dword [rax], edx
mov rax, qword [0x6bb85cf0]
mov edx, dword [rax]
mov rax, qword [0x6bb85e30]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x38]
call rax
lea rdx, str.MrsHortenseWildermanI
lea rcx, str.JuanitaPowlowski
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
lea rdx, str.EdwinaSpencer
xor ecx, ecx
call r15
mov rax, qword [0x6bb85920]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb85d70]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [str.qCeHV]
xor edx, edx
mov dword [rax], 0xee06c28e
call rbp
mov rax, qword [0x6bb85670]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [str.:y_2]
lea rcx, str.Autem_aut_alias_error_voluptatem
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb85690]
lea rdx, str.Natus_eos_aut_sunt_ut_totam_aut
lea rcx, str.DrKristopherPfefferJr
mov dword [rax], 0x4d910fa8
call r12
lea rdx, str.Fugiat_quidem_accusantium_quam_eveniet_nisi
lea rcx, str.MissShainaBoscoV
call r12
mov rax, qword [0x6bb85690]
lea rdx, str.Vel_nulla_omnis_eos_eos_reiciendis
xor ecx, ecx
mov dword [rax], 0xea368d36
call r15
mov rax, qword [0x6bb853c0]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rcx, qword [0x6bb85be0]
mov dword [rcx], eax
lea rcx, str.Dignissimos_voluptas_consectetur_repudiandae_distinctio
call rbx
mov ecx, 0x52f096c4
call fcn.6bad7ff0
mov rdx, qword [0x6bb85850]
lea rcx, str.Eaque_nisi_hic_totam_rerum_magni_rerum
mov dword [rdx], eax
lea rdx, str.Maiores_laboriosam_enim_distinctio_excepturi_atque_aperiam_ex_unde_reprehenderit_similique
call r12
mov rax, qword [0x6bb85340]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x322a7faa
mov qword [rsp + 0x20], 0
call rsi
mov ecx, 0xce59ec09
call fcn.6bad7ff0
mov rdx, qword [0x6bb85eb0]
mov rcx, qword [0x6bb85d90]
mov dword [rdx], eax
mov rax, qword [0x6bb85b40]
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.ColemanUpton
call r14
lea rcx, str.MaeganKing
call r14
mov ecx, 0x546e294f
call fcn.6bad7ff0
mov rdx, qword [0x6bb85580]
lea rcx, str.Qui_et_quos_pariatur_quia_error_iusto_itaque_dolore_qui_earum
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb85bd0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb85dd0]
mov dword [rax], edx
call rdi
mov rax, qword [0x6bb85f70]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb85da0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
lea rdx, str.JensenLittel
xor ecx, ecx
call r15
mov rax, qword [0x6bb85680]
xor edx, edx
xor ecx, ecx
lea r8, str.Et_ut_aut_possimus_ipsam_quidem_qui
mov dword [rax], 0x41375545
mov rax, qword [rsp + 0x38]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call rsi
lea rcx, str.Numquam_ratione_rerum_velit
call r14
lea rcx, str.CarmenCummings
call r14
mov rax, qword [0x6bb857e0]
xor ecx, ecx
lea rdx, str.Dolorem_natus_dignissimos_vel
mov dword [rax], 0xea71bacb
call r15
xor edx, edx
xor ecx, ecx
call rbp
mov ecx, 0x93565db4
call fcn.6bad7ff0
mov rdx, qword [0x6bb85360]
lea rcx, str.BrannonCummings
mov dword [rdx], eax
call rbx
xor ecx, ecx
call r13
lea rcx, str.Sed_quia_in_voluptatem_laborum_natus
call rbx
mov rax, qword [0x6bb85c50]
xor ecx, ecx
mov dword [rax], 0xefb1bb86
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call rsi
mov r14, qword [str.u8_]
mov ecx, dword [r14]
call fcn.6bad7ff0
mov rdx, qword [0x6bb858d0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb85570]
mov edx, dword [rax]
mov rax, qword [0x6bb853d0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
mov ecx, 0xccc8a11c
call fcn.6bad7ff0
mov rdx, qword [0x6bb85a70]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov r11, qword [0x6bb85900]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [r11], 0x1fc7b2b5
mov qword [rsp + 0x20], 0
call rsi
mov ecx, 0x89836d6c
call fcn.6bad7ff0
mov rdx, qword [0x6bb85cc0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb85380]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xa78aa823
call rbp
lea r8, str.Aut_dolores_quos_nihil
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
mov rax, qword [0x6bb854b0]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb86030]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb857c0]
mov dword [rax], 0xe742dd53
call rdi
mov rax, qword [0x6bb86010]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb86000]
mov ecx, 0x4cbeb65e
mov dword [rdx], eax
call fcn.6bad7ff0
mov rcx, qword [0x6bb85d90]
mov r13, qword [0x6bb85740]
mov dword [rcx], eax
mov ecx, dword [r13]
call fcn.6bad7ff0
mov rdx, qword [0x6bb854f0]
mov dword [rdx], eax
mov rax, qword [0x6bb85ae0]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb85e10]
lea r8, str.Est_reiciendis_repellendus
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x38]
call rax
lea rcx, str.TyshawnFay
call rbx
mov eax, dword [r14]
mov dword [r13], eax
mov rax, qword [0x6bb85620]
mov dword [rax], 0x9fad9e69
mov rax, qword [0x6bb855e0]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rbx, qword [0x6bb85c40]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rbx], eax
mov qword [rsp + 0x20], 0
call rsi
lea rdx, str.Quos_aut_vel_accusamus_qui
lea rcx, str.Praesentium_non_cumque_exercitationem_ut
call r12
xor edx, edx
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call rbp
mov ecx, 0x4c595958
call fcn.6bad7ff0
mov rdx, qword [0x6bb85370]
mov rsi, qword [0x6bb85340]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb85e40]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb85b20]
mov dword [rax], 0x1254d980
mov rax, qword [rsp + 0x40]
call rax
mov ecx, 0xaad1911a
call fcn.6bad7ff0
xor ecx, ecx
mov dword [rbx], eax
call rdi
mov rax, qword [0x6bb856f0]
mov ecx, 0x43031811
mov dword [rax], 0xd13eb079
call fcn.6bad7ff0
mov rdx, qword [0x6bb85d60]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
lea rdx, str.ZolaBecker
xor ecx, ecx
call r15
mov edx, dword [r14]
mov rax, qword [0x6bb85640]
mov r10, qword [rsp + 0xa8]
mov dword [rax], edx
mov rcx, qword [rsp + 0xa0]
mov rdx, r10
call fcn.6bace480
mov qword [rsp + 0x38], rax
mov rax, qword [0x6bb85d20]
cmp dword [rax], 0x6fcf
jle 0x6bad17f2
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rdi
mov r10, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.ProfJulienJenkins
lea rcx, str.Architecto_autem_minima_accusamus_molestiae_eaque_ex_quasi_et_tenetur_animi_provident_omnis_vitae
mov qword [rsp + 0x40], r10
call r10
mov rbx, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.PaytonErnser
xor ecx, ecx
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rbp
mov rsi, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.AddieRomaguera
call rsi
mov r12, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call r12
xor ecx, ecx
call rbp
lea rcx, str.Omnis_quo_illum_itaque_sit_exercitationem_distinctio_et_delectus_qui_qui
call rsi
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
call r14
mov rax, qword [0x6bb857c0]
mov edx, dword [rax]
mov rax, qword [0x6bb85e30]
mov dword [rax], edx
mov rax, qword [0x6bb85a60]
mov edx, dword [rax]
mov rax, qword [0x6bb857a0]
mov dword [rax], edx
mov rax, qword [0x6bb85a90]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb86010]
lea rcx, str.Enim_in_maiores_tempore
mov dword [rdx], eax
mov rax, qword [0x6bb85dd0]
mov dword [rax], 0x8922364f
mov rax, qword [0x6bb85a80]
mov dword [rax], 0x74535cdf
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov rax, qword [0x6bb85940]
mov rsi, qword [0x6bb85ee0]
xor ecx, ecx
mov dword [rax], 0x5f8df20f
mov rax, qword [0x6bb855c0]
mov edx, dword [rax]
mov rax, qword [0x6bb85c40]
mov dword [rax], edx
mov rax, qword [0x6bb856a0]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb85de0]
mov rsi, qword [0x6bb85f30]
mov eax, dword [rax]
mov dword [rsi], eax
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommMask]
call rsi
mov r11, qword [0x6bb85be0]
mov rax, qword [0x6bb856d0]
xor ecx, ecx
mov edx, dword [r11]
mov dword [rax], edx
mov rax, qword [0x6bb85880]
mov dword [rax], 0xc4c8eeba
call rdi
mov rax, qword [0x6bb85b40]
mov ecx, 0xe4c978f4
mov dword [rax], 0xc5426a78
mov rax, qword [0x6bb85320]
mov dword [rax], 0xe922d0f8
call fcn.6bad7ff0
mov r13, qword [0x6bb85f20]
xor ecx, ecx
lea rdx, str.MrBlazeJohnson
mov dword [r13], eax
call rbx
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb85f50]
mov r9, qword [0x6bb85310]
mov dword [rax], 0x5676b943
mov rax, qword [0x6bb854a0]
mov edx, dword [rax]
mov rax, qword [0x6bb85640]
mov dword [rax], edx
mov rax, qword [0x6bb85f40]
mov edx, dword [r9]
mov dword [rax], 0xeb7e12ac
mov rax, qword [0x6bb85e40]
mov dword [rax], edx
mov rax, qword [0x6bb85500]
mov rdx, qword [0x6bb85c30]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb85560]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb85440]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.NyasiaHarris
call rbx
mov rax, qword [0x6bb85300]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb86040]
mov dword [rax], edx
mov rax, qword [0x6bb85ac0]
lea rdx, str.Porro_et_distinctio_illum_sed_id
mov dword [rax], 0xda873b14
call rbx
lea rdx, str.Aut_odit_officia_quaerat
xor ecx, ecx
call rbx
xor ecx, ecx
call r12
mov r15, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.WillowAufderharIV
call r15
lea r8, str.LavernKertzmann
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x6bb85590]
mov r15, qword [0x6bb85580]
mov dword [rax], 0x2ca0d8b
mov ecx, dword [r15]
mov rax, qword [0x6bb85a90]
mov dword [rax], 0x99f7f464
call fcn.6bad7ff0
mov rdx, qword [0x6bb85d90]
mov r9, qword [0x6bb85310]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb85850]
xor edx, edx
mov eax, dword [rax]
mov dword [r9], eax
call rsi
mov rax, qword [0x6bb85860]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x9a357478
call rsi
xor ecx, ecx
mov dword [r13], 0x6cd88947
call r12
mov rax, qword [0x6bb85700]
mov dword [rax], 0x322117bc
mov rax, qword [0x6bb85ec0]
mov dword [rax], 0x7f190067
mov rax, qword [0x6bb85c30]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb85b60]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov edx, dword [r15]
mov rax, qword [0x6bb857f0]
xor ecx, ecx
mov dword [rax], edx
call rbp
mov rax, qword [0x6bb85fa0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb85e80]
mov dword [rax], edx
call rdi
xor ecx, ecx
lea rdx, str.Quos_quasi_quas_quia_officiis_at_sunt
call rbx
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rdi, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
xor ecx, ecx
mov qword [rsp + 0x20], 0
call rdi
xor ecx, ecx
call r12
mov ecx, 0x50e47999
call fcn.6bad7ff0
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb855a0]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x20], 0
call rdi
mov rax, qword [0x6bb854c0]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb854f0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [str.:y_2]
mov ecx, dword [rax]
call fcn.6bad7ff0
mov rdx, qword [0x6bb854e0]
mov r11, qword [0x6bb85be0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb85910]
lea rdx, str.BerthaGulgowski
mov dword [r11], 0xc776b718
mov dword [rax], 0x7532536c
call rbx
mov rax, qword [0x6bb85780]
mov rdi, qword [0x6bb85ac0]
mov ecx, 0x8dec6f7c
mov eax, dword [rax]
mov dword [rdi], eax
call fcn.6bad7ff0
mov rdx, qword [0x6bb85920]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.SheaConnelly
call rbx
mov rax, qword [0x6bb85eb0]
mov rdi, qword [0x6bb85dd0]
lea rdx, str.CordellSchillerIII
mov r10, qword [rsp + 0x40]
lea rcx, str.Reiciendis_corporis_harum_dolores_reiciendis_magni_quo
mov eax, dword [rax]
mov dword [rdi], eax
call r10
xor edx, edx
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rsi
mov edx, dword [r13]
mov rax, qword [0x6bb85f90]
mov ecx, 0x601362bc
mov dword [rax], edx
call fcn.6bad7ff0
mov rdi, qword [0x6bb85f30]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x6bb85810]
mov dword [rax], 0x9be3373
mov rax, qword [0x6bb853e0]
mov edx, dword [rax]
mov rax, qword [0x6bb85340]
mov dword [rax], edx
mov rax, qword [0x6bb85ee0]
mov edx, dword [rax]
mov rax, qword [0x6bb85460]
mov dword [rax], edx
xor edx, edx
call rsi
lea rdx, str.DrGiovannyEffertzSr
xor ecx, ecx
call rbx
mov rax, qword [rsp + 0x38]
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret