Function at 0x6bad103b
Capabilities:
Access the windows event log
Set current directory
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x78
mov rax, qword [0x6bb884c0]
cmp dword [rax], 0xa5b
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rdx
jne 0x6bad19d5
mov rsi, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.BlaiseKohler
call rsi
mov rax, qword [sym.imp.ADVAPI32.dll_OpenEventLogA]
lea rdx, str.FloyGreenholt
lea rcx, str.Dolor_perspiciatis_non_placeat
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x6bb88560]
xor ecx, ecx
mov dword [rax], 0xc8e0c7c9
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov qword [rsp + 0x38], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
xor edx, edx
lea rcx, str.ClydeGusikowski
call rsi
mov rax, qword [0x6bb87e00]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87d40]
mov rbx, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rcx, str.Sequi_et_aliquid_praesentium_natus_accusantium_dolorem_sed_nostrum_natus_modi_dicta_voluptatem
mov dword [rdx], eax
mov rax, qword [0x6bb883f0]
lea rdx, str.Est_est_magni_eos_minus_quia_non
mov dword [rax], 0x2836393c
mov rax, qword [0x6bb88470]
mov dword [rax], 0xf17c83c6
mov rax, qword [0x6bb885c0]
mov dword [rax], 0xf71f7cb1
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov ecx, 0xea16868b
call fcn.6bad9930
mov rdx, qword [0x6bb88360]
mov rdi, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x6bb88260]
xor edx, edx
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rax], 0x7ac12cf5
call r15
mov r13, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call r13
mov r10, qword [0x6bb87f20]
mov rbp, qword [0x6bb88430]
xor ecx, ecx
mov eax, dword [r10]
mov dword [rbp], eax
call r13
mov edx, dword [rbp]
mov rax, qword [0x6bb87c50]
xor ecx, ecx
mov dword [rax], edx
call rdi
xor ecx, ecx
call r13
mov r12, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
lea rdx, str.JacklynMullerDDS
lea rcx, str.AntonettaHahn
call rbx
mov rax, qword [0x6bb87de0]
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb88510]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x6bb87d20]
xor r9d, r9d
lea r8, str.ElianeHarber
lea rdx, str.Cumque_iste_harum_illo_aut_iusto_omnis_aspernatur
lea rcx, str.JaimeJones
mov dword [rax], 0x5b83ea12
mov rax, qword [sym.imp.KERNEL32.dll_ReplaceFileA]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb87db0]
mov rcx, qword [0x6bb88340]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb87cf0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb884b0]
mov r14, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
mov dword [rdx], eax
call r14
mov rax, qword [0x6bb87fe0]
mov ecx, 0x300398e3
mov edx, dword [rax]
mov rax, qword [0x6bb88090]
mov dword [rax], edx
call fcn.6bad9930
mov rdx, qword [0x6bb88700]
xor r9d, r9d
lea r8, str.Aperiam_dolore_reprehenderit_nam_illo_aperiam
lea rcx, str.ErynCasper
mov dword [rdx], eax
lea rdx, str.Reiciendis_voluptas
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb87ff0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88570]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x6bb88690]
mov ecx, 0x8eda8f19
mov edx, dword [rax]
mov rax, qword [0x6bb87bc0]
mov dword [rax], edx
call fcn.6bad9930
mov rdx, qword [0x6bb88130]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb87e10]
mov edx, dword [rax]
mov rax, qword [0x6bb88620]
mov dword [rax], edx
call r13
mov rax, qword [0x6bb88290]
mov ecx, 0x67135f2
mov dword [rax], 0xbd951af4
call fcn.6bad9930
mov rcx, qword [0x6bb880f0]
mov dword [rcx], eax
xor ecx, ecx
call r14
mov rax, qword [0x6bb88350]
mov edx, dword [rax]
mov rax, qword [0x6bb88640]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x58]
xor ecx, ecx
call rax
lea rdx, str.JonasRodriguezDVM
lea rcx, str.Dicta_recusandae_vero_rerum
call rbx
mov r11, qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x68], r11
call r11
mov rax, qword [0x6bb87c30]
mov rbp, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.CyrilHettingerPhD
mov dword [rax], 0x1307b984
mov rax, qword [0x6bb87ec0]
mov dword [rax], 0x8029dda9
call rbp
lea rdx, str.Id_nostrum_commodi_eaque_ut_optio_cupiditate
lea rcx, str.Doloribus_nihil_eum_alias_ut_reiciendis_dolor_sed_autem
call rbx
lea rdx, str.MrHipolitoPacochaSr
lea rcx, str.RachaelHyatt
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0xa13a13fc
call fcn.6bad9930
mov rdx, qword [0x6bb88380]
mov r11, qword [rsp + 0x68]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r11
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x6bb87ba0]
mov edx, dword [rax]
mov rax, qword [0x6bb87c20]
mov dword [rax], edx
mov rax, qword [0x6bb880f0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88340]
mov ecx, 0x395d477
mov dword [rdx], eax
call fcn.6bad9930
mov rdx, qword [0x6bb88580]
lea rcx, str.Vel_beatae_praesentium_officia
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x6bb884a0]
lea rcx, str.OswaldTurcotte
mov edx, dword [rax]
mov rax, qword [0x6bb87c70]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x6bb87f40]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb884b0]
mov dword [rcx], eax
xor ecx, ecx
call rdi
mov rax, qword [0x6bb88650]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87e90]
lea rcx, str.Quis_a_laudantium_eveniet
mov dword [rdx], eax
call rbp
lea rcx, str.BetteDavis
call rbp
mov r15, qword [0x6bb88060]
mov rax, qword [0x6bb880c0]
mov ecx, dword [r15]
mov dword [rax], 0x53d13ae8
call fcn.6bad9930
mov rcx, qword [0x6bb87f00]
mov dword [rcx], eax
mov rax, qword [0x6bb88080]
mov dword [rax], 0xd7a6d66
mov rax, qword [0x6bb87ca0]
mov edx, dword [rax]
mov rax, qword [0x6bb87c80]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x60]
xor ecx, ecx
call rax
xor ecx, ecx
call r14
mov rax, qword [0x6bb87eb0]
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb87d00]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
xor ecx, ecx
call r13
mov r14, qword [0x6bb88630]
mov rcx, qword [0x6bb87e00]
mov eax, dword [r14]
mov dword [rcx], eax
mov rax, qword [0x6bb87ef0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb886c0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x6bb88120]
mov r10, qword [0x6bb87f20]
mov ecx, 0x7bbd6d27
mov rdx, qword [0x6bb882d0]
mov dword [rax], 0x604a1165
mov rax, qword [0x6bb88510]
mov eax, dword [rax]
mov dword [r15], eax
mov eax, dword [r10]
mov dword [rdx], eax
call fcn.6bad9930
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x6bb88560]
mov r15, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov dword [rcx], eax
xor ecx, ecx
mov qword [rsp + 0x20], 0
call r15
mov rax, qword [0x6bb88390]
lea rdx, str.LornaStiedemann
lea rcx, str.Iusto_facilis_quia_ut_at_explicabo
mov dword [rax], 0x4c3ae471
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb880f0]
xor edx, edx
lea rcx, str.Qui_a_dolorum_sapiente_odio_dicta_ullam
mov dword [rax], 0x6a586fe8
call rsi
mov r8, qword [0x6bb880a0]
mov rdx, qword [0x6bb87ba0]
lea rcx, str.Non_eveniet_ullam_tempore_autem_voluptatem
mov eax, dword [r8]
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x6bb87dc0]
lea rdx, str.Rem_consequatur_recusandae_nulla
lea rcx, str.Labore_eum_reprehenderit_asperiores_quo
mov dword [rax], 0x6859b8b4
call rbx
mov rax, qword [0x6bb88490]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb87be0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call r13
xor ecx, ecx
mov dword [r14], 0x280c860b
mov rax, qword [rsp + 0x38]
call rax
mov r13, qword [0x6bb87fd0]
mov rcx, qword [0x6bb87d00]
mov eax, dword [r13]
mov dword [rcx], eax
mov ecx, 0x26ea5d9b
call fcn.6bad9930
mov r8, qword [0x6bb880a0]
xor ecx, ecx
mov dword [r8], eax
mov rax, qword [0x6bb88050]
mov dword [rax], 0x1f2f62b5
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call r15
mov rax, qword [0x6bb87e70]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88690]
mov r15, qword [0x6bb88320]
mov ecx, dword [r14]
mov dword [rdx], eax
mov edx, dword [r15]
mov rax, qword [0x6bb88710]
mov dword [rax], edx
call fcn.6bad9930
mov rdx, qword [0x6bb88550]
mov dword [rdx], eax
mov rax, qword [0x6bb87e70]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb88350]
lea rdx, str.PatriciaStehr
mov dword [rcx], eax
lea rcx, str.Facere_et_aspernatur_ab_pariatur_inventore_et
call rbx
mov ecx, 0x1c819c35
call fcn.6bad9930
xor edx, edx
xor ecx, ecx
mov dword [r13], eax
mov rax, qword [rsp + 0x60]
call rax
xor r9d, r9d
lea r8, str.Fugit_quisquam_ad_a_corporis_temporibus
lea rdx, str.EvangelineKilback
lea rcx, str.DrSandyBergstromPhD
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov r13, qword [0x6bb87bf0]
mov ecx, 0xa29fe034
mov dword [r13], 0xefa9ee06
call fcn.6bad9930
mov rdx, qword [0x6bb88410]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb886e0]
mov rdx, qword [0x6bb882d0]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
xor r9d, r9d
lea r8, str.Labore_repudiandae_maiores_error_et
lea rdx, str.Hic_delectus_rerum_minima_sint_aut_assumenda_commodi
lea rcx, str.Reiciendis_quas_ut_atque_ex_sit_neque_perferendis_quas
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
xor ecx, ecx
call rdi
mov rcx, qword [0x6bb88650]
mov eax, dword [r13]
mov dword [rcx], eax
mov ecx, 0x86ebdc2b
call fcn.6bad9930
mov rdx, qword [0x6bb88110]
lea rcx, str.JeremieHackett
mov dword [rdx], eax
xor edx, edx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
mov ecx, 0x209b6627
call fcn.6bad9930
mov rdx, qword [0x6bb88670]
lea rcx, str.DrDevonteLemkeDDS
mov dword [rdx], eax
mov rax, qword [0x6bb88030]
mov dword [rax], 0x9d63950a
call rbp
mov rax, qword [0x6bb885c0]
lea rdx, str.Tempora_voluptatum_tempore_in_illo_quam_omnis_vel_dolor
lea rcx, str.JesusPacocha
mov dword [rax], 0xe890c5c0
call rbx
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call rdi
lea rdx, str.MiguelStokes
lea rcx, str.JulianaSmitham
call rbx
mov rax, qword [0x6bb88020]
mov rdx, qword [0x6bb87f00]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov edx, dword [r15]
mov rax, qword [0x6bb87d80]
lea rcx, str.Modi_aspernatur_ut
mov dword [rax], edx
xor edx, edx
call rsi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
lea rcx, str.ProfMarcelOrnIII
call rbp
mov rax, qword [0x6bb87d00]
mov rsi, qword [0x6bb880e0]
lea rdx, str.Maxime_harum_et_quidem_a_illo_harum_non
lea rcx, str.CamronStanton
mov eax, dword [rax]
mov dword [rsi], eax
call rbx
mov rax, qword [0x6bb87d30]
mov rbx, qword [0x6bb87ba0]
lea rcx, str.ReidWaters
mov edx, dword [rax]
mov rax, qword [0x6bb88520]
mov dword [rax], edx
mov rax, qword [0x6bb882d0]
lea rdx, str.Vel_cum_culpa
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x50]
call rax
mov r11, qword [rsp + 0x68]
xor edx, edx
xor ecx, ecx
call r11
mov rax, qword [0x6bb87d90]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdi, qword [0x6bb87e10]
xor edx, edx
xor ecx, ecx
mov dword [rsi], 0x1a57b810
mov dword [rdi], eax
mov rax, qword [rsp + 0x40]
call rax
lea rdx, str.Cumque_et_sequi_aut_dolores_odit_odio_eaque_aut_quos_natus_aliquid
xor r9d, r9d
lea r8, str.Ea_excepturi_maiores_praesentium_doloribus_ut_saepe
lea rcx, str.ProfCristobalBahringerI
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
mov rax, qword [0x6bb87fc0]
mov rsi, qword [0x6bb87e90]
lea rcx, str.JordanCartwright
mov eax, dword [rax]
mov dword [rsi], eax
call rbp
mov rax, qword [0x6bb87cd0]
xor ecx, ecx
mov dword [rax], 0x4ce7c2f4
mov rax, qword [rsp + 0x38]
call rax
mov rax, qword [rsp + 0x60]
xor edx, edx
xor ecx, ecx
call rax
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xc0]
call fcn.6baceec0
mov qword [rsp + 0x40], rax
mov rax, qword [0x6bb884c0]
cmp dword [rax], 0xe54
jne 0x6bad20f6
mov rax, qword [0x6bb87c80]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov r12, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
xor ecx, ecx
mov dword [rax], 0xd051026c
mov qword [rsp + 0x20], 0
call r12
mov ecx, 0x22fef9ef
call fcn.6bad9930
mov r11, qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x6bb880b0]
mov qword [rsp + 0x50], r11
mov dword [rbx], eax
call r11
mov rdi, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call rdi
mov rax, qword [0x6bb88070]
mov rsi, qword [0x6bb87d40]
lea rcx, str.Quisquam_id_et_architecto_et_qui_quia_voluptas_enim
mov r10, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov r14, qword [0x6bb87c10]
mov dword [rax], 0x87e79659
mov rax, qword [0x6bb87cd0]
mov qword [rsp + 0x48], r10
mov eax, dword [rax]
mov dword [r14], 0x2e7f0530
mov dword [rsi], eax
mov rax, qword [0x6bb884f0]
mov edx, dword [rax]
mov rax, qword [0x6bb88680]
mov dword [rax], edx
xor edx, edx
call r10
mov rax, qword [0x6bb885a0]
xor r8d, r8d
xor ecx, ecx
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov edx, dword [rax]
mov rax, qword [0x6bb87da0]
mov dword [rax], edx
xor edx, edx
call rbx
mov rsi, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
call rsi
mov rbp, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call r12
mov ecx, 0xcc5c033e
call fcn.6bad9930
mov rdx, qword [0x6bb88370]
mov ecx, 0x1c7ee59d
mov dword [rdx], eax
call fcn.6bad9930
mov rcx, qword [0x6bb886a0]
xor r8d, r8d
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_ReplaceFileA]
xor r9d, r9d
lea r8, str.Qui_vero_vitae_repellat
lea rdx, str.Ipsa_eveniet_voluptatem_incidunt_sit_in_earum_omnis_et
lea rcx, str.Quas_vero_numquam_et_consectetur_explicabo_et_ut
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x38], rax
call rax
mov rax, qword [0x6bb87dc0]
mov r15, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Voluptatem_doloremque_magni_quaerat_ut_enim_ipsam_nisi_delectus
mov dword [rax], 0x9de3b567
call r15
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x76999a0b
call fcn.6bad9930
mov rdx, qword [0x6bb88360]
mov r11, qword [rsp + 0x50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb880c0]
xor edx, edx
mov dword [rax], 0x3ec1c425
call r11
mov r13, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x6bb88560]
xor r9d, r9d
xor r8d, r8d
mov dword [r14], 0x994a4ebb
mov rcx, qword [0x6bb88000]
mov edx, dword [rax]
mov rax, qword [0x6bb87d30]
mov r14, qword [0x6bb882b0]
mov dword [rax], edx
mov rax, qword [0x6bb87ff0]
mov rdx, qword [0x6bb882f0]
mov eax, dword [rax]
mov dword [rcx], eax
mov eax, dword [r14]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb87ba0]
xor ecx, ecx
mov dword [rax], 0xba8fbabf
call rbp
mov rax, qword [0x6bb87f60]
mov rcx, qword [0x6bb87c90]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r13
xor r9d, r9d
mov rax, qword [rsp + 0x38]
lea r8, str.DonnieFay
lea rdx, str.Neque_ea_in_sed
lea rcx, str.Sint_vel_consequuntur_ut
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb88670]
mov edx, dword [rax]
mov rax, qword [0x6bb88320]
mov dword [rax], edx
mov rax, qword [0x6bb883b0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb880c0]
mov ecx, 0xaa0a2bf0
mov dword [rdx], eax
call fcn.6bad9930
mov rcx, qword [0x6bb87d40]
mov rdx, qword [0x6bb88000]
mov dword [rcx], eax
mov rax, qword [0x6bb87f40]
mov ecx, 0x9b927567
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb880f0]
mov edx, dword [rax]
mov rax, qword [0x6bb88630]
mov dword [rax], edx
call fcn.6bad9930
mov rdx, qword [0x6bb88020]
mov dword [rdx], eax
mov rax, qword [0x6bb87d10]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb88550]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x6bb87d70]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x5e48ffff
mov rax, qword [0x6bb87c70]
mov dword [rax], 0x1a235f27
call rsi
mov rax, qword [0x6bb87fb0]
mov rdx, qword [0x6bb886a0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb87c70]
xor edx, edx
mov dword [rax], 0x91ba0049
call rsi
mov rax, qword [0x6bb88720]
xor ecx, ecx
mov dword [rax], 0x8dd505b9
call rdi
xor ecx, ecx
call rbp
mov rax, qword [0x6bb87d00]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb886d0]
xor ecx, ecx
mov dword [r14], 0x2e18e423
mov dword [rdx], eax
call rdi
mov ecx, 0xe49473ed
call fcn.6bad9930
xor r9d, r9d
lea r8, str.Dolorem_ut_iste_delectus_aut_et
lea rcx, str.Est_rerum_sed_eaque_et_voluptas_esse_eum_fuga_et
mov dword [r14], eax
mov r14, qword [0x6bb88120]
mov rax, qword [0x6bb87cb0]
mov edx, dword [r14]
mov dword [rax], edx
lea rdx, str.MrKarleyKrisI
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb87c30]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rax], 0xd5600bf4
mov rax, qword [0x6bb87fa0]
mov edx, dword [rax]
mov rax, qword [0x6bb883f0]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x20], 0
call r12
lea rcx, str.MrsAbbieSchamberger
call r15
mov rax, qword [0x6bb886a0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb88750]
mov rcx, qword [0x6bb88600]
mov dword [rdx], eax
mov rax, qword [0x6bb87ef0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call r13
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x6bb87bb0]
mov dword [rax], 0xc2110fc5
mov rax, qword [0x6bb882c0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87ec0]
mov r10, qword [rsp + 0x48]
lea rcx, str.ArnoldoHamill
mov dword [rdx], eax
mov rax, qword [0x6bb87ba0]
xor edx, edx
mov dword [rax], 0x936c5b47
call r10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x6bb87f40]
mov r12, qword [0x6bb88080]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb87dd0]
mov dword [r12], 0x48a68f41
mov dword [rax], edx
call rdi
mov ecx, 0x7dcd3954
call fcn.6bad9930
mov rdx, qword [0x6bb886e0]
mov ecx, 0x880f77b0
mov dword [rdx], eax
call fcn.6bad9930
mov rdx, qword [0x6bb880d0]
mov dword [rdx], eax
mov rax, qword [0x6bb88550]
mov edx, dword [rax]
mov rax, qword [0x6bb87f50]
mov dword [rax], edx
mov rax, qword [0x6bb88010]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87c90]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb87ca0]
mov edx, dword [rax]
mov rax, qword [0x6bb87ee0]
mov dword [rax], edx
call rbp
mov rax, qword [0x6bb88510]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb883e0]
mov rbp, qword [0x6bb88300]
lea rcx, str.ElveraKulas
mov dword [rdx], eax
mov rax, qword [0x6bb87ce0]
lea rdx, str.ProfLeilaniCronaDDS
mov eax, dword [rax]
mov dword [rbp], eax
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rcx, str.KearaHeaney
call r15
mov rax, qword [0x6bb884b0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x766d9bbe
mov rax, qword [0x6bb87fe0]
mov dword [rax], 0x2b3364a2
call r13
mov eax, dword [r12]
mov rcx, qword [0x6bb87f60]
mov dword [rcx], eax
mov rax, qword [0x6bb88090]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb87d40]
mov r10, qword [rsp + 0x48]
lea rcx, str.GarfieldHarber
mov dword [rdx], eax
xor edx, edx
call r10
mov r11, qword [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call r11
xor ecx, ecx
call rdi
mov rax, qword [0x6bb87f90]
xor r9d, r9d
lea r8, str.MaceyMcLaughlinIV
lea rdx, str.In_voluptatum_sint_et
lea rcx, str.DrJoshEichmann
mov dword [rax], 0x3dec11e2
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb87fb0]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdx, qword [0x6bb883c0]
mov dword [rdx], eax
mov rax, qword [0x6bb87c20]
mov ecx, dword [rax]
call fcn.6bad9930
mov rdi, qword [0x6bb88540]
xor ecx, ecx
mov dword [rdi], eax
call qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov rax, qword [0x6bb88600]
mov ecx, dword [rax]
call fcn.6bad9930
mov rcx, qword [0x6bb88360]
mov dword [rcx], eax
lea rcx, str.KellyLynch
call r15
mov ecx, 0x3856918
call fcn.6bad9930
mov rdx, qword [0x6bb87c60]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb87ea0]
xor edx, edx
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x6bb882f0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb880b0]
mov eax, dword [rax]
mov dword [r14], eax
call rsi
xor edx, edx
xor r8d, r8d
xor ecx, ecx
call rbx
mov ecx, 0xc2dfa8ff
call fcn.6bad9930
mov rdx, qword [str.32_]
mov dword [rdx], eax
mov rax, qword [rsp + 0x40]
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret