Function at 0x6bad4d33
Capabilities:
Clear file content
Set current directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0
mov qword [rsp + 0x110], rcx
mov dword [rsp + 0x118], edx
mov qword [rsp + 0x120], r8
je 0x6bad5c54
mov rax, qword [0x6bb80a40]
mov ecx, 0xa208c9b8
mov edx, dword [rax]
mov rax, qword [0x6bb80dc0]
mov dword [rax], edx
call fcn.6bad9c90
mov rsi, qword [0x6bb80df0]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [rsi], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x6bb80fc0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81180]
mov ecx, 0xd5ea5b01
mov dword [rdx], eax
mov rax, qword [str.eNl.h_Q]
mov dword [rax], 0xf2c06d94
mov rax, qword [0x6bb806d0]
mov dword [rax], 0x9efc26b0
mov rax, qword [0x6bb80610]
mov dword [rax], 0xd9c9d5c2
call fcn.6bad9c90
mov rdi, qword [0x6bb80770]
xor ecx, ecx
mov r14, qword [0x6bb81120]
mov rbp, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov dword [rdi], eax
mov rax, qword [0x6bb80de0]
mov rdi, qword [0x6bb80cb0]
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x6bb807b0]
mov eax, dword [rax]
mov dword [rdi], eax
call rbp
mov ecx, 0xf2f3b325
call fcn.6bad9c90
mov rdx, qword [0x6bb80ac0]
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x6bb80970]
lea r8, str.EleanoreConnIII
xor ecx, ecx
mov dword [rax], 0xdef203a2
mov rax, qword [0x6bb810e0]
mov edx, dword [rax]
mov rax, qword [0x6bb809b0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Et_ipsam_odio
lea rcx, str.Velit_libero_est
mov qword [rsp + 0x70], rax
call rax
mov ecx, 0x5ff38a5c
call fcn.6bad9c90
mov rdx, qword [0x6bb81190]
mov rbx, qword [0x6bb80e50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80910]
mov dword [rax], 0x9c444a70
mov rax, qword [0x6bb807b0]
mov edx, dword [rax]
mov rax, qword [0x6bb80550]
mov dword [rax], edx
mov rax, qword [0x6bb80510]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x6bb80950]
mov ecx, 0xa364c2a7
mov edx, dword [rax]
mov rax, qword [0x6bb80fe0]
mov dword [rax], edx
call fcn.6bad9c90
mov rbx, qword [0x6bb80580]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rbx], eax
mov rbx, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x6bb80740]
xor edx, edx
mov r12, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.ZelmaHammes
mov dword [rax], 0x45381d2e
call r12
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x6bb81070]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb809a0]
mov dword [rax], edx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.HelmerHauck
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb80e10]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r15, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rsi], eax
call r15
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x6bb81010]
mov edx, dword [rax]
mov rax, qword [0x6bb80cc0]
mov dword [rax], edx
mov rax, qword [0x6bb80d20]
mov edx, dword [rax]
mov rax, qword [0x6bb811c0]
mov dword [rax], edx
mov rax, qword [0x6bb80880]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb80870]
xor edx, edx
xor ecx, ecx
lea r8, str.Facere_saepe_quis_maxime_expedita_unde_ut_eum_quo_et_dolores
mov dword [rsi], eax
mov rax, qword [0x6bb80cb0]
mov dword [rax], 0xeef5ac88
mov rax, qword [rsp + 0x58]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov r13, qword [0x6bb80630]
mov rax, qword [0x6bb80650]
lea rcx, str.Quia_commodi_dolorum
mov edx, dword [r13]
mov dword [rax], edx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov qword [rsp + 0x80], rax
call rax
mov rax, qword [0x6bb80ff0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a00]
mov dword [rdx], eax
mov rax, qword [0x6bb80eb0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb80560]
xor ecx, ecx
mov dword [rsi], eax
call r15
mov rax, qword [0x6bb80960]
mov rsi, qword [0x6bb80ca0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80f10]
mov dword [rax], edx
mov rax, qword [0x6bb80940]
mov dword [rax], 0x69beb6f1
mov rax, qword [0x6bb805f0]
mov edx, dword [rax]
mov rax, qword [0x6bb80690]
mov dword [rax], edx
mov rax, qword [0x6bb811a0]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb80780]
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov qword [rsp + 0x50], rax
call rax
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
call r14
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x60], rax
call rax
mov ecx, 0x94828951
call fcn.6bad9c90
mov rsi, qword [0x6bb81130]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rsi], eax
mov dword [rsp + 0x20], 0
call rbx
xor ecx, ecx
call r15
mov rax, qword [0x6bb80d30]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc0d6eee0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.VergieMuller
mov qword [rsp + 0x88], rax
call rax
mov ecx, 0x15169b88
call fcn.6bad9c90
mov rdx, qword [0x6bb80a80]
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rdx], eax
xor edx, edx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80b20]
mov rdx, qword [0x6bb80ab0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rsi
mov ecx, 0x7a8436bd
call fcn.6bad9c90
mov rdx, qword [0x6bb80a50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
lea rcx, str.Dolorum_atque_est_tempora_laudantium_molestiae
call r12
lea r8, str.AleenRohan
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80af0]
mov ecx, 0x432a7e8
mov dword [rax], 0x1587a86e
call fcn.6bad9c90
mov rdx, qword [0x6bb810f0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
call rax
lea rcx, str.MarleyStracke
mov rax, qword [rsp + 0x88]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
lea rcx, str.Voluptate_distinctio_dolores_qui_veritatis_dolor_velit_dicta
mov rax, qword [rsp + 0x48]
call rax
lea rdx, str.Quasi_id_voluptatem_quae_et_unde_ipsam_corporis
lea rcx, str.LewDuBuque
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x6bb80e50]
xor ecx, ecx
mov dword [rax], 0xa605277c
mov rax, qword [0x6bb811d0]
mov dword [rax], 0x9821c6af
mov rax, qword [rsp + 0x40]
call rax
mov edx, dword [r13]
mov rax, qword [0x6bb810a0]
xor ecx, ecx
mov dword [rax], edx
mov rax, qword [0x6bb80700]
mov rdx, qword [0x6bb808e0]
mov dword [rax], 0xe3a4c781
mov rax, qword [0x6bb80e70]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb81090]
mov edx, dword [rax]
mov rax, qword [0x6bb81040]
mov dword [rax], edx
mov rax, qword [0x6bb80740]
xor edx, edx
mov dword [rax], 0xf2bd47f5
mov rax, qword [0x6bb805a0]
mov dword [rax], 0xab83aefd
call rdi
mov ecx, 0x5830c397
call fcn.6bad9c90
mov rdx, qword [0x6bb80880]
lea rcx, str.DangeloKuhn
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x6bb811d0]
lea rcx, str.Saepe_laborum_non
mov edx, dword [rax]
mov rax, qword [0x6bb805b0]
mov dword [rax], edx
mov rax, qword [rsp + 0x48]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x3918
jne 0x6bad5c54
mov rax, qword [0x6bb80ca0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb808e0]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
xor edx, edx
lea rcx, str.EthelProhaska
call r12
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb81090]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80de0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x90], rax
call rax
mov rax, qword [0x6bb80530]
mov dword [rax], 0x904ecd24
mov rax, qword [0x6bb80b70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb807b0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
lea rdx, str.Dolor_optio_quia_laborum
lea rcx, str.Eum_est_qui
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call r15
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0xa8], r10
call r10
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
xor edx, edx
call r14
mov rax, qword [0x6bb80950]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xd4abfc4e
call r14
mov ecx, dword [r13]
call fcn.6bad9c90
mov rdx, qword [0x6bb80b00]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb80a50]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x6bb80cb0]
mov r12, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x98], rax
call rax
mov rax, qword [0x6bb80de0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80f30]
mov r13, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x6bb80fa0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb807a0]
mov dword [rax], edx
xor edx, edx
call rdi
mov r11, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0xa0], r11
call r11
lea r8, str.EdgarDickens
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80b20]
mov rdx, qword [0x6bb80960]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x90]
call rax
mov rax, qword [0x6bb811e0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x6bb80d00]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb81130]
xor edx, edx
mov dword [rax], 0xaa089152
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x6bb810e0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb806a0]
mov dword [rax], edx
call r15
mov rax, qword [0x6bb80750]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80870]
mov dword [rdx], eax
xor edx, edx
call r12
mov r11, qword [rsp + 0xa0]
xor ecx, ecx
call r11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb80b70]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x89615883
mov rax, qword [0x6bb80820]
mov dword [rax], 0x97da9790
mov rax, qword [0x6bb80af0]
mov dword [rax], 0xd8ec209c
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x98]
call rax
mov r11, qword [0x6bb809c0]
mov r13, qword [0x6bb80730]
mov ecx, 0xd3f65cc3
mov rax, qword [0x6bb80b80]
mov edx, dword [r11]
mov dword [r13], 0xb43fd17c
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb805e0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x6bb80710]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb811d0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb81150]
mov dword [rax], 0x4eb240d1
mov rax, qword [0x6bb811d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb811b0]
mov ecx, 0x89340459
mov r11, qword [0x6bb809c0]
mov dword [rdx], eax
mov rax, qword [0x6bb80db0]
mov dword [r11], 0x1624fe3d
mov dword [rax], 0xc6261ed6
call fcn.6bad9c90
mov rdx, qword [0x6bb80510]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x6bb80ec0]
mov edx, dword [r13]
mov dword [rax], 0x44b618b
mov rax, qword [0x6bb805d0]
mov dword [rax], edx
mov rax, qword [0x6bb80d00]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80e70]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb811b0]
lea rcx, str.KeyshawnRosenbaum
mov dword [rax], 0xaf5828ce
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80770]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81020]
mov dword [rax], edx
xor edx, edx
call rdi
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80fb0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf1e599f7
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov ecx, 0xb0e26d2f
call fcn.6bad9c90
mov rdx, qword [0x6bb80a30]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb81170]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdi, qword [0x6bb80db0]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [rdi], eax
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
mov rax, qword [0x6bb80c90]
mov rdi, qword [0x6bb80ff0]
xor ecx, ecx
mov rdx, qword [0x6bb80a50]
mov eax, dword [rax]
mov dword [rdi], eax
mov rdi, qword [0x6bb81160]
mov rax, qword [0x6bb80d50]
mov dword [rax], 0xc5510f73
mov eax, dword [rdi]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x98]
call rax
mov rax, qword [0x6bb811f0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb806c0]
mov dword [r13], eax
mov rax, qword [0x6bb80620]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80e50]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80580]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x6bb80d30]
mov edx, dword [rax]
mov rax, qword [0x6bb807c0]
mov dword [rax], edx
mov rax, qword [0x6bb80ae0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80670]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
lea r8, str.RamonaNolan
xor edx, edx
mov rax, qword [rsp + 0x58]
xor ecx, ecx
call rax
mov rax, qword [0x6bb80ed0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d70]
mov r13, qword [str.7U5]
xor ecx, ecx
mov dword [rdx], eax
mov dword [r13], 0x60ede9ea
call r15
mov rax, qword [0x6bb805e0]
mov edx, dword [rax]
mov rax, qword [0x6bb80540]
mov dword [rax], edx
mov rax, qword [0x6bb810b0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80600]
xor ecx, ecx
mov dword [rdx], eax
call rbp
xor edx, edx
xor ecx, ecx
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
mov ecx, 0x5f312140
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb810c0]
mov dword [rdx], eax
mov rax, qword [0x6bb80f30]
xor edx, edx
mov dword [rax], 0x2d936de6
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x90]
call rax
lea rdx, str.Enim_nulla_non_aut_rem
lea rcx, str.MrRooseveltKonopelski
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x6bb80850]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x84ed9711
call rsi
lea rdx, str.AlfordDuBuque
lea rcx, str.TravonLueilwitz
mov rax, qword [rsp + 0x70]
call rax
mov ecx, 0x8c2d8b14
call fcn.6bad9c90
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [rsp + 0x50]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
mov rax, qword [0x6bb80580]
mov rdi, qword [0x6bb80710]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb807e0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdi, qword [str.:_]
mov dword [rdi], eax
mov rax, qword [0x6bb80fb0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80560]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb806d0]
mov dword [rax], 0x95291ded
mov rax, qword [rsp + 0x80]
call rax
mov ecx, 0xbaf291de
call fcn.6bad9c90
mov rdx, qword [0x6bb80ed0]
xor ecx, ecx
mov dword [rdx], eax
mov rdx, qword [0x6bb80580]
mov eax, dword [r13]
mov dword [rdx], eax
mov rax, qword [rsp + 0x40]
call rax
mov r10, qword [rsp + 0xa8]
xor ecx, ecx
call r10
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb80710]
xor ecx, ecx
mov dword [rax], 0xa93e3dff
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80eb0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80ef0]
mov dword [rax], edx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [str.eNl.h_Q]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc8fe1459
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb81210]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a70]
mov ecx, 0xbd1aa79f
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80ad0]
mov ecx, 0x43d47ad7
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb81060]
lea rcx, str.In_ut_quia_molestiae_aperiam_aut_amet
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80b70]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
call r15
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb808a0]
lea rcx, str.NadiaTillman
mov edx, dword [rax]
mov rax, qword [0x6bb80e30]
mov dword [rax], edx
mov rax, qword [rsp + 0x48]
call rax
mov ecx, 0x4c15b3c5
call fcn.6bad9c90
mov rdi, qword [0x6bb806c0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x6bb80a40]
mov rdi, qword [0x6bb80ab0]
mov dword [rax], 0x3a8a8d19
mov rax, qword [0x6bb810d0]
mov eax, dword [rax]
mov dword [rdi], eax
call rsi
lea rcx, str.DarionFrami
mov rax, qword [rsp + 0x88]
call rax
lea r8, str.Eligendi_non_quia_ex_accusamus_suscipit_ad_excepturi_sint
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0xabf2dbb8
call fcn.6bad9c90
mov rdx, qword [0x6bb80ee0]
mov ecx, 0x47a15853
mov dword [rdx], eax
mov rax, qword [0x6bb80580]
mov dword [rax], 0xe920a98b
mov rax, qword [0x6bb80700]
mov edx, dword [rax]
mov rax, qword [0x6bb80f40]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb805c0]
mov dword [rdx], eax
movsxd rax, dword [rsp + 0x118]
xor ecx, ecx
mov r9d, 4
mov r8d, 0x3000
mov rdx, rax
mov qword [rsp + 0x90], rax
call fcn.6bad34dd
mov qword [rsp + 0x80], rax
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0
je 0x6bad693b
mov rax, qword [0x6bb80b70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb81090]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov qword [rsp + 0x98], rax
call rax
mov ecx, 0xfb77b6ed
call fcn.6bad9c90
mov rdi, qword [0x6bb80580]
xor edx, edx
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rdi], eax
call r12
mov rbp, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb811d0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x744a5d64
mov rax, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov qword [rsp + 0x50], rax
call rax
mov r11, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0xa8], r11
call r11
lea r8, str.Voluptatibus_consequatur_quos_qui
xor edx, edx
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_OpenEventA]
call r15
mov r13, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call r13
mov rax, qword [0x6bb80790]
xor ecx, ecx
mov dword [rax], 0x8affdbfd
mov rax, qword [0x6bb80830]
mov dword [rax], 0xafef6cb3
call rbp
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x6bb80fa0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb811b0]
lea rcx, str.Repellat_dolor_sit_totam_consequatur_voluptates_hic_et_libero_ut
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
mov qword [rsp + 0x40], rax
call rax
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x88], rax
call rax
mov ecx, 0x9d8a7aee
call fcn.6bad9c90
mov rdi, qword [0x6bb80900]
mov ecx, 0x35c5fc98
mov dword [rdi], eax
mov rax, qword [0x6bb80aa0]
mov dword [rax], 0x19b6e38
call fcn.6bad9c90
mov rsi, qword [0x6bb80550]
mov ecx, 0x1300c3bb
mov dword [rsi], eax
call fcn.6bad9c90
mov rsi, qword [0x6bb80eb0]
xor edx, edx
xor ecx, ecx
mov dword [rbx], 0xb9f1b66c
mov dword [rsi], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.GudrunDietrich
call rdi
mov rbx, qword [0x6bb80590]
mov rax, qword [0x6bb80520]
mov ecx, dword [rbx]
mov dword [rax], 0xf67437e3
call fcn.6bad9c90
mov rdx, qword [0x6bb81050]
lea rcx, str.Rerum_qui_minus_quo_nesciunt_ut
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb80d10]
mov r14, qword [0x6bb80ef0]
xor ecx, ecx
mov rdx, qword [0x6bb806d0]
mov eax, dword [rax]
mov dword [rdx], eax
mov edx, dword [r14]
mov rax, qword [0x6bb81060]
mov dword [rax], edx
mov rax, qword [0x6bb80630]
xor edx, edx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x6bb80a80]
mov dword [rax], 0x9fe250fc
call r12
mov ecx, 0x4befaa6f
call fcn.6bad9c90
mov rdx, qword [0x6bb80f00]
lea rcx, str.Deleniti_modi_et_vitae_aliquid_repellat_placeat_sunt_sit_nisi
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call r13
lea rcx, str.MrZackeryFeestJr
call rdi
mov rbx, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Est_alias_quae_natus_eum_alias_suscipit
lea rcx, str.Vero_esse_cupiditate_quo_unde
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Et_est_mollitia
mov qword [rsp + 0x70], rax
call rax
xor edx, edx
lea r8, str.Deserunt_reiciendis_consectetur_fugiat_rerum_ducimus_consequuntur_odit_odit_sunt_ut
xor ecx, ecx
call r15
mov ecx, 0xf7cdd559
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80650]
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov ecx, 0x34bc52d8
call fcn.6bad9c90
mov rdx, qword [0x6bb80ea0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x60], rax
call rax
mov ecx, 0x95c4a372
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80ed0]
mov dword [rsi], 0xcb60545e
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x6bb80e80]
lea rdx, str.FionaProhaska
lea rcx, str.Repellendus_culpa_suscipit_ut
mov eax, dword [rax]
mov dword [r14], eax
call rbx
mov r10, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rax, qword [0x6bb805e0]
xor ecx, ecx
mov qword [rsp + 0xa0], r10
mov dword [rax], 0x17127f99
call r10
mov rax, qword [0x6bb808a0]
xor ecx, ecx
mov dword [rax], 0xf09d49ec
call r13
lea rdx, str.Et_inventore_minus_ut_perspiciatis
lea rcx, str.Vel_occaecati_labore_molestiae_dolorum
call rbx
mov rax, qword [0x6bb806f0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb80d50]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
call r12
mov rax, qword [0x6bb80670]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb809e0]
xor r9d, r9d
xor r8d, r8d
mov dword [rdx], eax
mov rax, qword [0x6bb80700]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x6df432a5
mov rax, qword [0x6bb80950]
mov dword [rax], 0xfa27acf8
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
lea r8, str.Repellat_odio_est_modi_molestias_quasi_cumque_rerum_et_ut_corporis
xor edx, edx
xor ecx, ecx
call r15
lea rcx, str.Sapiente_sit_corrupti_beatae_voluptatum
call rdi
mov rax, qword [0x6bb80600]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80870]
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rdx], eax
call rsi
lea rdx, str.WendellFeeney
lea rcx, str.Rerum_omnis_omnis_eos_voluptatem_et_eos
call rbx
mov rax, qword [0x6bb80500]
mov ecx, 0x88debab7
mov dword [rax], 0x9051eef7
call fcn.6bad9c90
mov rdx, qword [0x6bb80860]
mov dword [rdx], eax
mov rax, qword [0x6bb80530]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d30]
mov dword [rdx], eax
mov rax, qword [0x6bb80770]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d50]
lea rcx, str.AhmedSwaniawski
mov dword [rdx], eax
lea rdx, str.Velit_recusandae_non_dolorem_aspernatur
call rbx
mov rax, qword [0x6bb80a40]
mov dword [rax], 0x7bb2ea9b
mov rax, qword [0x6bb80e70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80790]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80620]
mov dword [rax], 0x66d98ef0
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x6bb81130]
mov ecx, 0xf096a326
mov dword [rax], 0x1b99ef2b
call fcn.6bad9c90
mov rdx, qword [0x6bb80ed0]
xor ecx, ecx
mov dword [r14], 0x453a2a0c
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x6bb81040]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xa3a254d2
call r12
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
mov ecx, 0x2d7c1921
call fcn.6bad9c90
mov rdx, qword [0x6bb80b10]
xor ecx, ecx
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov dword [rdx], eax
mov rax, qword [0x6bb808b0]
mov dword [rax], 0x1a5594aa
call r12
lea rcx, str.Odio_nihil_dignissimos_omnis_odit_omnis
mov rax, qword [rsp + 0x70]
call rax
mov ecx, 0x3171df83
call fcn.6bad9c90
mov rdx, qword [0x6bb80d90]
lea rcx, str.Iste_dolorem_qui_quam_corporis
mov dword [rdx], eax
mov rax, qword [rsp + 0x70]
call rax
mov r11, qword [rsp + 0xa8]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r11
xor ecx, ecx
call rsi
mov r14, qword [0x6bb80880]
mov rdx, qword [0x6bb80900]
lea rcx, str.Dolores_excepturi_iste_et_quasi_dolores_qui_voluptatem_ea
mov eax, dword [r14]
mov dword [rdx], eax
mov rax, qword [0x6bb808c0]
mov dword [rax], 0x95d3b8a8
call rdi
mov ecx, 0x9fbe784a
call fcn.6bad9c90
mov rdx, qword [0x6bb805d0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb805b0]
mov dword [rax], 0x7835eede
call rbp
mov rax, qword [0x6bb806a0]
mov ecx, 0x11a0e4f8
mov edx, dword [rax]
mov rax, qword [0x6bb80a90]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80ed0]
mov r10, qword [rsp + 0xa0]
xor ecx, ecx
mov dword [rdx], eax
call r10
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
lea r8, str.Tempora_necessitatibus_delectus_voluptas_perferendis_officia_voluptatum_doloribus_soluta_architecto_corrupti_numquam_qui_magni
xor edx, edx
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb80710]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb807d0]
lea rcx, str.Soluta_quo_et_culpa_reprehenderit_odit_ab_voluptatem_optio
mov dword [rdx], eax
mov rax, qword [0x6bb80ca0]
xor edx, edx
mov dword [rax], 0xc0491be5
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb80cc0]
mov rdx, qword [0x6bb80cb0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80b70]
mov dword [rax], 0x705284d2
call rsi
lea rcx, str.AmbroseSchumm
call rdi
mov rax, qword [0x6bb80740]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80cd0]
xor ecx, ecx
mov dword [rdx], eax
call r13
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
call r13
mov r10, qword [rsp + 0xa0]
xor ecx, ecx
call r10
mov rax, qword [0x6bb80b00]
xor ecx, ecx
mov dword [rax], 0x1b20e160
mov rax, qword [rsp + 0x78]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
lea rdx, str.MsCierraBuckridge
lea rcx, str.Harum_a_ipsa_soluta_fugit_debitis_et
call rbx
mov rax, qword [0x6bb81210]
mov dword [rax], 0x575bf0e5
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0xa0be
jne 0x6bad693b
mov rax, qword [0x6bb805b0]
mov rdx, qword [0x6bb80580]
lea r8, str.Veritatis_error_nobis_accusamus_architecto_similique_facere_sint_at_quia_labore_praesentium
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r15
xor edx, edx
xor ecx, ecx
call r13
lea rdx, str.ErickNaderI
lea rcx, str.MartaBogisich
call rbx
mov ecx, 0x61bbdea6
call fcn.6bad9c90
mov rdx, qword [0x6bb80860]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov dword [r14], 0x96f572c3
mov r14, qword [0x6bb809f0]
xor ecx, ecx
mov rax, qword [0x6bb80c90]
mov edx, dword [r14]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
call r12
xor ecx, ecx
call rbp
mov r10, qword [0x6bb80570]
mov rax, qword [0x6bb80930]
xor ecx, ecx
mov rdx, qword [0x6bb80500]
mov dword [rax], 0x845a067
mov eax, dword [r10]
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb80d30]
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x6bb811a0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80de0]
mov ecx, 0xda95aac6
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb807c0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x6bb806e0]
mov rdx, qword [0x6bb81040]
lea rcx, str.MissAmiyaStantonDVM
mov eax, dword [rax]
mov dword [rdx], eax
lea rdx, str.LizaSanford
call rbx
lea rcx, str.Quia_assumenda_in_expedita_explicabo_commodi_consequatur_sit
call rdi
mov rax, qword [0x6bb80790]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb806c0]
mov rdi, qword [0x6bb808d0]
mov dword [rdx], eax
mov rax, qword [0x6bb80ec0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb806d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80ae0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x88606b55
call fcn.6bad9c90
mov rdx, qword [0x6bb81070]
mov dword [rdx], eax
mov rax, qword [0x6bb806d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a60]
mov rbx, qword [str.eNl.h_Q]
xor ecx, ecx
mov rdi, qword [0x6bb805d0]
mov dword [rdx], eax
mov rax, qword [0x6bb80b30]
mov edx, dword [rax]
mov rax, qword [0x6bb80c80]
mov dword [rax], edx
mov rax, qword [0x6bb80540]
xor edx, edx
mov eax, dword [rax]
mov dword [rdi], eax
mov rdi, qword [0x6bb80960]
mov eax, dword [rbx]
mov dword [rdi], eax
call r13
mov rax, qword [0x6bb80fe0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80d80]
mov dword [rax], edx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x66c969ee
call fcn.6bad9c90
mov rdx, qword [0x6bb80f20]
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [rdx], eax
mov rax, qword [0x6bb80ca0]
mov dword [rax], 0x98ae51f2
call r14
mov rax, qword [0x6bb80580]
mov rbp, qword [str.7U5]
mov rdx, qword [0x6bb80ca0]
mov dword [rax], 0xb2a83189
mov eax, dword [rbp]
mov dword [rdx], eax
mov rax, qword [0x6bb811e0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80db0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb80950]
mov rdx, qword [0x6bb80cb0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80a20]
mov rdx, qword [0x6bb80d30]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80b00]
xor edx, edx
mov dword [rax], 0x316a785c
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x6bb80ea0]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80b00]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov eax, dword [rdi]
mov rdi, qword [0x6bb806f0]
xor edx, edx
lea rcx, str.MoriahReilly
mov dword [rdi], eax
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call rsi
mov eax, dword [rbx]
mov rdi, qword [0x6bb80860]
lea rcx, str.ClementGoodwin
mov dword [rdi], eax
mov rax, qword [rsp + 0x70]
call rax
mov rdi, qword [0x6bb80f60]
mov ecx, dword [rdi]
call fcn.6bad9c90
mov rdx, qword [0x6bb80b60]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor ecx, ecx
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x97fcde32
call fcn.6bad9c90
mov rdx, qword [0x6bb808d0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x98]
call rax
mov rax, qword [0x6bb805c0]
mov dword [rax], 0xd157f6c1
mov rax, qword [0x6bb80fa0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb805f0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80dc0]
mov dword [rax], 0xd9772d00
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
lea r8, str.Sunt_numquam_aliquid_animi_quam
xor edx, edx
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov ecx, dword [rbx]
mov rax, qword [0x6bb80560]
mov dword [rax], 0xd4779dca
call fcn.6bad9c90
mov rbx, qword [0x6bb80860]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [0x6bb80e20]
mov dword [rax], 0x8fbd8fe1
mov rax, qword [0x6bb81180]
mov dword [rax], 0x12b49a0d
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80950]
mov dword [rax], 0xa05d4cb7
mov rax, qword [0x6bb80760]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r10, qword [0x6bb80570]
xor edx, edx
lea rcx, str.EvaHesselIV
mov dword [r10], eax
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb811a0]
mov dword [rax], 0xf9cd76b0
mov rax, qword [0x6bb811c0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb80740]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rsi
mov rax, qword [0x6bb81120]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x7c4a85ce
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x6bb80550]
mov edx, dword [rax]
mov rax, qword [0x6bb81000]
mov dword [rax], edx
mov rax, qword [0x6bb808a0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80b80]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb80650]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb81040]
mov dword [rax], 0x108ccd1d
mov rax, qword [0x6bb80d70]
mov dword [rax], 0x2e7d6227
mov rax, qword [0x6bb80e00]
mov dword [rax], 0xd93133cf
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0xc867beea
call fcn.6bad9c90
mov rdx, qword [0x6bb80640]
lea r8, str.Qui_sint_amet_ipsa_nobis_dignissimos_enim
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov ecx, 0x87fc008a
call fcn.6bad9c90
mov dword [rbp], eax
mov qword [rsp + 0x40], 0
mov eax, dword [rsp + 0x40]
mov edi, dword [rsp + 0x40]
mov dword [rsp + 0x60], eax
mov rax, qword [0x6bb80f80]
mov eax, dword [rax]
cmp dword [rsp + 0x118], edi
jle 0x6bad820a
cmp eax, 0x8fe4
jle 0x6bad6f96
mov rax, qword [0x6bb81090]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb81150]
lea rcx, str.KeeleyKessler
mov dword [rsi], eax
mov rsi, qword [sym.imp.KERNEL32.dll_lstrlenA]
call rsi
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov rbx, qword [0x6bb80fc0]
mov ecx, dword [rbx]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a10]
mov rdi, qword [0x6bb80680]
xor ecx, ecx
lea r8, str.EvangelineDenesik
mov dword [rdx], eax
mov rax, qword [0x6bb810f0]
mov edx, dword [rax]
mov rax, qword [0x6bb811f0]
mov dword [rax], edx
mov rax, qword [0x6bb81150]
xor edx, edx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb808f0]
mov dword [rax], 0x4c2f5d69
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.ConnorKoss
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x6bb80fa0]
mov rdi, qword [str.:_]
xor ecx, ecx
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov eax, dword [rax]
mov dword [rdi], eax
call r14
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov ecx, 0x6cc89ac3
call fcn.6bad9c90
mov rdi, qword [0x6bb80890]
lea rcx, str.Animi_aut_rem_vel_non_dolorem
mov dword [rdi], eax
call rsi
mov rdi, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call rdi
mov ecx, 0xc95dface
call fcn.6bad9c90
mov rdx, qword [0x6bb80800]
mov ecx, 0xd404ad7
mov dword [rdx], eax
call fcn.6bad9c90
mov ecx, 0x60bee962
mov dword [rbx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb808a0]
mov rbp, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb80e00]
mov r13, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb810a0]
mov dword [rax], edx
xor edx, edx
call r13
mov rbx, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80860]
xor ecx, ecx
mov dword [rax], 0x5e7002
mov rax, qword [0x6bb80b10]
mov dword [rax], 0x10237e08
call rbx
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0x78], r10
call r10
mov ecx, 0x1e5e5d51
call fcn.6bad9c90
mov rdx, qword [0x6bb80870]
mov ecx, 0x25957842
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80db0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb806b0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r11, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov rbp, qword [0x6bb80740]
mov qword [rsp + 0x70], r11
mov dword [rbp], eax
call r11
mov rax, qword [0x6bb80e10]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81080]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
xor r8d, r8d
xor edx, edx
xor r9d, r9d
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov r12, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r12
xor ecx, ecx
call rdi
mov r9, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Aut_officia_quia_et_dolorem_nulla_aspernatur_consequuntur
mov qword [rsp + 0x68], r9
call r9
mov r15, qword [0x6bb80570]
mov ecx, dword [r15]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a30]
mov ecx, 0x9a0c5a45
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80b00]
lea rcx, str.Qui_esse_sed_et_dolorum_facere
mov dword [rdx], eax
call rsi
xor ecx, ecx
call rbx
mov eax, dword [r15]
mov dword [rbp], eax
mov rax, qword [0x6bb80ad0]
mov edx, dword [rax]
mov rax, qword [0x6bb80cd0]
mov dword [rax], edx
mov rax, qword [0x6bb806e0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a90]
lea rcx, str.MissKarlieMayertSr
mov dword [rdx], eax
mov rax, qword [0x6bb80fb0]
mov edx, dword [rax]
mov rax, qword [0x6bb80710]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r12
xor ecx, ecx
call rbx
mov r15, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call r15
xor edx, edx
lea rcx, str.EverettMaggio
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rbx
mov ecx, 0x70da1629
call fcn.6bad9c90
mov rdx, qword [0x6bb80af0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb80f00]
mov rbp, qword [0x6bb80a50]
lea rcx, str.Dicta_aut_deserunt_est_quaerat_quis_est_officia_dolorum
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x6bb809d0]
mov dword [rax], 0xe1afc09b
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb809e0]
mov rdx, qword [0x6bb80db0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80820]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80970]
mov dword [rdx], eax
mov rax, qword [0x6bb80ab0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80f40]
mov ecx, 0xee91d162
mov dword [rdx], eax
call fcn.6bad9c90
xor ecx, ecx
mov dword [rbp], eax
call rdi
lea rcx, str.Natus_officia_delectus_facere_est_quis
call rsi
mov rax, qword [0x6bb81200]
xor ecx, ecx
mov dword [rax], 0xf3989c30
mov rax, qword [0x6bb80890]
mov edx, dword [rax]
mov rax, qword [0x6bb80770]
mov dword [rax], edx
mov rax, qword [0x6bb80680]
mov edx, dword [rax]
mov rax, qword [0x6bb809c0]
mov dword [rax], edx
call r14
lea r8, str.Sed_aliquid_aut
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov ecx, dword [rbp]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a90]
mov ecx, 0x23fd29
mov dword [rdx], eax
mov rax, qword [0x6bb80fe0]
mov dword [rax], 0xfa2252fb
call fcn.6bad9c90
mov rdx, qword [0x6bb809a0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80ee0]
mov dword [rax], 0xc918915c
call r12
mov r9, qword [rsp + 0x68]
lea rcx, str.CameronLeannon
call r9
mov rax, qword [0x6bb80c80]
mov r8, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80f10]
mov qword [rsp + 0x50], r8
mov dword [rax], edx
xor edx, edx
call r8
lea rcx, str.Cum_amet_dolor_qui_dicta
call rsi
mov rax, qword [0x6bb811c0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a60]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov r8, qword [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call r8
mov ecx, 0x2a7640fd
call fcn.6bad9c90
mov rdx, qword [0x6bb80d20]
mov r10, qword [rsp + 0x78]
xor ecx, ecx
mov dword [rdx], eax
call r10
mov ecx, 0x9a0df147
call fcn.6bad9c90
xor edx, edx
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [0x6bb80600]
mov dword [rax], 0x41160f8c
mov rax, qword [0x6bb809f0]
mov dword [rax], 0xf7ba0aa4
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rsi, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rsi
xor ecx, ecx
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov rax, qword [0x6bb80860]
xor edx, edx
xor ecx, ecx
mov r11, qword [rsp + 0x70]
mov dword [rax], 0x14eaa8a2
call r11
lea r8, str.AngusFritsch
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x6bb80f30]
xor r8d, r8d
xor edx, edx
mov rsi, qword [0x6bb80870]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x58]
call rax
mov edx, dword [rbp]
mov rax, qword [0x6bb80ac0]
xor ecx, ecx
mov dword [rax], edx
call rdi
mov ecx, 0x7a089ab2
call fcn.6bad9c90
mov rax, qword [0x6bb80c80]
mov rsi, qword [0x6bb80860]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [str.:_]
mov edx, dword [rax]
mov rax, qword [0x6bb80ff0]
mov dword [rax], edx
mov rax, qword [0x6bb80a70]
mov edx, dword [rax]
mov rax, qword [0x6bb81010]
mov dword [rax], edx
xor edx, edx
call r13
xor ecx, ecx
call r14
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80980]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb808f0]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x6bb80fd0]
mov dword [rax], 0xe31a4641
mov rax, qword [0x6bb80700]
mov edx, dword [rax]
mov rax, qword [0x6bb80ef0]
mov dword [rax], edx
call r12
mov eax, dword [rsp + 0x60]
mov rsi, qword [rsp + 0x120]
mov rdi, qword [rsp + 0x40]
and eax, 7
mov al, byte [rsi + rax]
mov rsi, qword [rsp + 0x110]
xor al, byte [rsi + rdi]
mov byte [rsp + 0x88], al
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0
je 0x6bad7906
mov rax, qword [0x6bb80af0]
mov rbx, qword [0x6bb80510]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x6bb80690]
mov edx, dword [rax]
mov rax, qword [0x6bb80e30]
mov dword [rax], edx
mov rax, qword [0x6bb81010]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb80690]
xor ecx, ecx
mov rbx, qword [0x6bb80dc0]
lea r8, str.Vero_perferendis_quisquam_inventore_est_voluptatem_vel_laudantium_est_sunt_inventore
mov r14, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [rsi], eax
mov rsi, qword [0x6bb80870]
mov rax, qword [0x6bb81030]
mov dword [rbx], 0xb21576e2
mov edx, dword [rsi]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [0x6bb80a70]
mov ecx, 0xcb77b142
mov dword [rax], 0x384d21cd
mov rax, qword [0x6bb80dd0]
mov dword [rax], 0x81dd8a6c
call fcn.6bad9c90
mov r12, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov dword [rsi], eax
call r12
mov rax, qword [0x6bb80960]
mov rdi, qword [0x6bb80690]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov eax, dword [rbx]
mov rbx, qword [0x6bb80640]
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_SetLastError]
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
lea rdx, str.ProfDeronHaley
mov rbp, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.Cum_quasi_est_ut_accusantium_omnis_sit_dolor_est_dolore
call rbp
mov r10, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [0x6bb809d0]
xor ecx, ecx
mov qword [rsp + 0x58], r10
mov dword [rax], 0x309d8d08
call r10
xor ecx, ecx
call r12
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb80ec0]
mov rsi, qword [0x6bb81120]
lea rcx, str.FordSawayn
mov r15, qword [0x6bb80c70]
mov eax, dword [rax]
mov dword [r15], 0xbcefc5fc
mov dword [rsi], eax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0x50], rax
call rax
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x6bb80d20]
mov r10, qword [rsp + 0x58]
xor ecx, ecx
mov rdi, qword [0x6bb806d0]
mov eax, dword [rax]
mov qword [rsp + 0x78], r10
mov dword [rdi], eax
call r10
mov rax, qword [0x6bb80d90]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb809f0]
mov dword [rax], edx
mov rax, qword [0x6bb80880]
mov dword [rax], 0x58ca1102
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov ecx, 0x4d37da6f
call fcn.6bad9c90
mov rdx, qword [0x6bb81090]
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x6bb80e00]
mov rdi, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov dword [rax], 0xdc6b238c
call rdi
lea r8, str.Autem_error_illo_enim_non_excepturi
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb809c0]
mov ecx, 0x44a8cbc4
mov dword [rax], 0xf3538c46
call fcn.6bad9c90
mov rdx, qword [0x6bb80990]
mov r14, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.SybleLeuschke
mov dword [rdx], eax
xor edx, edx
call r14
mov rax, qword [0x6bb80610]
mov rdx, qword [0x6bb80ee0]
mov ecx, 0xa3e3c439
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80d30]
mov dword [rax], 0x921b734f
call fcn.6bad9c90
mov rdx, qword [0x6bb805f0]
lea rcx, str.Velit_aut_id_aut_qui_eum_molestiae_quaerat
mov dword [rdx], eax
xor edx, edx
call r14
mov rax, qword [0x6bb808a0]
mov ecx, dword [rax]
call fcn.6bad9c90
xor edx, edx
lea rcx, str.AlizeLebsack
mov dword [r15], eax
call r14
mov r14, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.BrendanMorarJr
call r14
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
lea rdx, str.Et_ratione_consequatur_optio_quod
lea rcx, str.Ea_ad_praesentium_et_consectetur
call rbp
mov ecx, 0x70ad2edd
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb806e0]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov ecx, 0x48846926
call fcn.6bad9c90
mov rdx, qword [0x6bb807b0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x6bb80fa0]
lea rcx, str.Error_et_quae_ut_dolorem_quis_sit_delectus_vero_deserunt_molestias_ut_est
mov dword [rax], 0x7020c3d2
mov rax, qword [0x6bb80610]
mov dword [rax], 0xc08172bc
call r14
xor r9d, r9d
xor r8d, r8d
mov rbp, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbp
lea rcx, str.MsJazmynErnserPhD
call r14
mov r15, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x6bb80f00]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80cb0]
mov dword [rax], edx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call r15
mov r11, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0xa0], r11
call r11
mov rax, qword [0x6bb80750]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a10]
xor ecx, ecx
mov r10, qword [rsp + 0x78]
mov dword [rdx], eax
call r10
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x98], r10
call r10
mov rax, qword [0x6bb80760]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2e98e9d0
mov rax, qword [0x6bb80a60]
mov dword [rax], 0x90ca5506
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x6bb80f50]
mov ecx, 0xda90fce8
mov edx, dword [rax]
mov rax, qword [0x6bb811e0]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80f60]
mov dword [rdx], eax
mov rax, qword [0x6bb81120]
mov edx, dword [rax]
mov rax, qword [0x6bb80f10]
mov dword [rax], edx
mov rax, qword [0x6bb80b20]
mov dword [rax], 0x6dfc8f23
mov rax, qword [0x6bb80580]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb810a0]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x6bb80950]
xor ecx, ecx
mov dword [rax], 0xbfc3d65a
call r12
mov rax, qword [0x6bb807e0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80a20]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80990]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80660]
mov r10, qword [rsp + 0x98]
xor ecx, ecx
mov dword [rdx], eax
call r10
mov rax, qword [0x6bb80e20]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x3e244979
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x6bb81130]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81100]
mov dword [rax], edx
call rbx
mov rax, qword [0x6bb80a30]
mov ecx, 0x8a4c61d3
mov dword [rax], 0x43062c3f
mov rax, qword [0x6bb81070]
mov dword [rax], 0x4b1a860e
mov rax, qword [0x6bb81050]
mov dword [rax], 0xc9fc806f
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80760]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x6bb81060]
lea rcx, str.Est_nostrum_velit_quos_ratione
mov edx, dword [rax]
mov rax, qword [0x6bb80d10]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb805e0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80800]
lea rcx, str.HollisHickle
mov dword [rdx], eax
call r14
mov rax, qword [0x6bb80c90]
xor ecx, ecx
mov dword [rax], 0xf48c045
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
mov r14, qword [0x6bb80a00]
mov rdx, qword [0x6bb80fc0]
xor ecx, ecx
mov eax, dword [r14]
mov dword [rdx], eax
mov rax, qword [0x6bb80f70]
mov dword [rax], 0x3c703773
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbp
xor ecx, ecx
call rdi
xor ecx, ecx
call r12
mov rax, qword [0x6bb811a0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x778441be
call r15
mov ecx, 0x4020030
call fcn.6bad9c90
mov rdx, qword [0x6bb80ee0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov ecx, 0xf077eae6
call fcn.6bad9c90
mov rdx, qword [0x6bb80680]
mov ecx, 0x124b41de
mov dword [rdx], eax
mov rax, qword [0x6bb80f50]
mov dword [rax], 0xdae9d339
call fcn.6bad9c90
mov rdx, qword [0x6bb80550]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80e90]
mov r11, qword [rsp + 0xa0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80b60]
mov dword [rax], edx
call r11
mov rax, qword [0x6bb80b80]
mov dword [r14], 0x7f15018
mov dword [rax], 0xd4868636
mov rax, qword [0x6bb806e0]
mov dword [rax], 0xb07fb3f1
mov rax, qword [0x6bb810d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb806c0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x70]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x6bb80e50]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb80640]
mov rbp, qword [0x6bb81190]
mov rdx, qword [0x6bb80610]
mov dword [rcx], eax
mov eax, dword [rbp]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80fc0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xcd1e3d44
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x6bb806b0]
mov ecx, 0xcec3ecc8
mov edx, dword [rax]
mov rax, qword [0x6bb805a0]
mov dword [rax], edx
call fcn.6bad9c90
mov rbx, qword [0x6bb80d90]
mov ecx, 0x74af4a7a
mov rsi, qword [0x6bb806d0]
mov dword [rbx], eax
mov rax, qword [0x6bb81000]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb80a60]
mov dword [rax], 0xb51f4143
call fcn.6bad9c90
mov rdi, qword [0x6bb80fa0]
mov rbx, qword [0x6bb807b0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x6bb80940]
mov dword [rax], 0xc1d5892a
mov rax, qword [0x6bb80ed0]
mov dword [rax], 0x16073c58
mov rax, qword [0x6bb805d0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x78]
call rax
mov rbx, qword [0x6bb80da0]
mov rax, qword [0x6bb80f50]
mov ecx, dword [rbx]
mov dword [rax], 0xb4ff3b19
call fcn.6bad9c90
mov rsi, qword [0x6bb808a0]
mov dword [rsi], eax
mov rax, qword [0x6bb80510]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdi, qword [0x6bb807e0]
mov ecx, 0xa9b98c82
mov rsi, qword [0x6bb806a0]
mov dword [rdi], eax
mov rax, qword [0x6bb80dd0]
mov dword [rsi], 0x10f12b99
mov dword [rax], 0x111d6d35
mov rax, qword [0x6bb80690]
mov dword [rax], 0xe50cdec2
mov rax, qword [0x6bb80e20]
mov dword [rax], 0xba00a103
mov rax, qword [0x6bb80d20]
mov edx, dword [rax]
mov rax, qword [0x6bb80930]
mov dword [rax], edx
call fcn.6bad9c90
lea rcx, str.Reprehenderit_quia_autem_amet_aut_numquam
mov dword [rsi], eax
mov rax, qword [0x6bb809e0]
mov edx, dword [rax]
mov rax, qword [0x6bb80780]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb807b0]
mov dword [rbp], 0x83161faf
mov dword [rax], 0x571624cf
mov rax, qword [0x6bb80a40]
mov edx, dword [rax]
mov rax, qword [0x6bb81150]
mov dword [rax], edx
mov rax, qword [0x6bb80770]
mov ecx, dword [rax]
call fcn.6bad9c90
mov dword [rbx], eax
mov rax, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x40]
mov sil, byte [rsp + 0x88]
mov byte [rax + rbx], sil
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0
je 0x6bad8200
mov ecx, 0x2429052c
call fcn.6bad9c90
mov rdi, qword [0x6bb80ca0]
lea rcx, str.Quia_eum_non_eum_eum_nisi_recusandae_magnam
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x6bb808e0]
mov dword [rax], 0x7ba80bf4
mov rax, qword [0x6bb808c0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb81060]
mov dword [rbx], eax
mov rax, qword [0x6bb80f40]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rsi, qword [0x6bb80fa0]
mov rbx, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rsi], eax
mov rsi, qword [0x6bb80dc0]
mov rax, qword [0x6bb80630]
mov edx, dword [rsi]
mov dword [rax], edx
xor edx, edx
call rbx
mov eax, dword [rsi]
mov rdi, qword [0x6bb80d20]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rsi, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov dword [rdi], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x6bb80d70]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb810e0]
mov dword [rax], edx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov qword [rsp + 0x48], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80d30]
lea rdx, str.TobyParisian
mov r15, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.EllisMills
mov dword [rax], 0x4bffa845
mov rax, qword [0x6bb80fe0]
mov dword [rax], 0xb7a0f021
call r15
mov rax, qword [0x6bb810b0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb81020]
mov r13, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rbx], eax
call r13
mov r14, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb806b0]
mov rdi, qword [0x6bb80730]
lea rcx, str.Quis_perspiciatis_ex_eos_nisi_possimus_minus_omnis_ducimus_aut_et_omnis_est
mov r12, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov edx, dword [rax]
mov rax, qword [0x6bb805f0]
mov dword [rax], edx
mov rax, qword [0x6bb81210]
xor edx, edx
mov eax, dword [rax]
mov dword [rdi], eax
call r12
mov rax, qword [0x6bb80a00]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80790]
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rbx, qword [0x6bb80550]
mov rax, qword [0x6bb80ca0]
mov ecx, dword [rbx]
mov dword [rax], 0xce803253
call fcn.6bad9c90
mov rdx, qword [0x6bb80d40]
mov ecx, 0x91df59f0
mov dword [rdx], eax
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x6bb811c0]
mov dword [rcx], eax
mov rax, qword [0x6bb80ed0]
xor ecx, ecx
mov dword [rax], 0x78a522af
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x50], rax
call rax
mov ecx, 0xa1a0e0da
call fcn.6bad9c90
mov rdx, qword [0x6bb80620]
mov rbp, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb811c0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80ad0]
mov dword [rax], edx
call r13
mov r11, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x70], r11
call r11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
mov ecx, 0x17d68d76
call fcn.6bad9c90
mov rsi, qword [0x6bb80fe0]
mov dword [rsi], eax
mov rax, qword [0x6bb81190]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r10, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
mov rsi, qword [0x6bb80aa0]
xor r8d, r8d
mov qword [rsp + 0x78], r10
mov dword [rsi], eax
call r10
mov rax, qword [0x6bb80eb0]
mov ecx, dword [rax]
call fcn.6bad9c90
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x6bb81010]
mov rbx, qword [0x6bb81020]
xor ecx, ecx
mov dword [rax], 0x8f030a16
mov rax, qword [0x6bb80a10]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80d50]
mov rsi, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81080]
mov dword [rax], edx
call rsi
mov rax, qword [0x6bb80730]
mov rbx, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0x481168a7
mov rax, qword [0x6bb80760]
mov edx, dword [rax]
mov rax, qword [0x6bb80f50]
mov dword [rax], edx
mov rax, qword [0x6bb80560]
mov dword [rax], 0x2cb1b8c7
call rbx
mov ecx, 0xe2effed7
call fcn.6bad9c90
mov rdx, qword [0x6bb80b30]
mov dword [rdx], eax
mov rax, qword [0x6bb80fe0]
mov rdx, qword [0x6bb81090]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80b70]
mov edx, dword [rax]
mov rax, qword [0x6bb81110]
mov dword [rax], edx
mov rax, qword [str.Z2iy]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80670]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb80ce0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80e90]
mov dword [rax], edx
mov rax, qword [0x6bb80fa0]
mov edx, dword [rax]
mov rax, qword [0x6bb80d90]
mov dword [rax], edx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80900]
mov r11, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rax], 0x35e832b0
call r11
xor ecx, ecx
call r13
xor r8d, r8d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0xebb1526d
call fcn.6bad9c90
mov rcx, qword [0x6bb80a90]
mov dword [rcx], eax
xor ecx, ecx
call rsi
mov rax, qword [0x6bb805d0]
xor ecx, ecx
mov dword [rax], 0x211e2e8c
mov rax, qword [0x6bb80ed0]
mov dword [rax], 0x6840702a
call rsi
mov ecx, 0xcab2eebd
call fcn.6bad9c90
mov rdx, qword [0x6bb80f60]
mov dword [rdx], eax
mov rax, qword [0x6bb80800]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80e10]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x6bb807d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80ac0]
lea rcx, str.KayleighJones
mov dword [rdx], eax
mov rax, qword [0x6bb80780]
mov edx, dword [rax]
mov rax, qword [0x6bb80600]
mov dword [rax], edx
lea rdx, str.KevonKuvalis
call r15
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r13
mov r15, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call r15
mov r9, qword [0x6bb80830]
mov rdx, qword [str.Z2iy]
xor ecx, ecx
mov eax, dword [r9]
mov dword [rdx], eax
call r13
mov rax, qword [0x6bb811e0]
xor edx, edx
lea rcx, str.Eum_libero_dolorem_aut_aut_sequi_aut_dolores_sapiente_praesentium_eaque_illum_ipsam
mov dword [rax], 0xdf940543
call r12
mov r11, qword [0x6bb811a0]
mov rax, qword [0x6bb806f0]
mov rcx, qword [0x6bb80fc0]
mov rdx, qword [0x6bb810d0]
mov dword [rax], 0x55d6243c
mov eax, dword [r11]
mov dword [rcx], eax
mov rax, qword [0x6bb80de0]
lea rcx, str.Vel_perspiciatis_et_et_non_in
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x6bb81090]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb80a10]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbp
mov rax, qword [0x6bb809e0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x1d2703e8
call r15
mov rax, qword [0x6bb806c0]
xor ecx, ecx
mov dword [rax], 0x58e8c75a
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rbx
xor ecx, ecx
call rbx
mov rax, qword [0x6bb810d0]
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80930]
mov dword [rax], edx
call r15
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80b50]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80ae0]
mov dword [rax], edx
call r15
xor ecx, ecx
call rbx
xor edx, edx
lea rcx, str.MaraUllrich
call r12
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb80d20]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r9, qword [0x6bb80830]
mov dword [r9], eax
mov rax, qword [0x6bb81060]
mov edx, dword [rax]
mov rax, qword [0x6bb80af0]
mov dword [rax], edx
mov rax, qword [0x6bb80a90]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80aa0]
mov ecx, 0xa90eb0e8
mov dword [rdx], eax
mov rax, qword [0x6bb808d0]
mov edx, dword [rax]
mov rax, qword [0x6bb806a0]
mov dword [rax], edx
call fcn.6bad9c90
mov rcx, qword [0x6bb81190]
mov dword [rcx], eax
xor ecx, ecx
call r13
mov rax, qword [0x6bb80c90]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80f70]
mov dword [rax], edx
call r13
mov rax, qword [0x6bb809e0]
xor ecx, ecx
mov dword [rax], 0x9ac634c7
call r15
mov r10, qword [rsp + 0x78]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
call r10
xor r9d, r9d
mov rax, qword [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x6bb805c0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc5b7565d
call r14
lea r8, str.MrLeviCollins
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x6bb80a00]
mov ecx, 0x5b6d7384
mov rdx, qword [0x6bb80ca0]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80cc0]
mov ecx, 0x24459830
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80960]
xor ecx, ecx
mov dword [rdx], eax
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rdi
lea rcx, str.ProfMaggieRoberts
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80d60]
mov rcx, qword [str.Z2iy]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb80640]
lea rcx, str.DejuanGreenholt
mov dword [rax], 0x89af979a
call r12
lea rcx, str.Velit_aut_qui_accusamus
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80c60]
mov ecx, 0x199003bc
mov edx, dword [rax]
mov rax, qword [0x6bb80880]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80650]
mov r12, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.ClaudineOKon
mov dword [rdx], eax
call r12
mov ecx, 0xa0e7efbe
call fcn.6bad9c90
mov rdx, qword [0x6bb80d30]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x6bb80b40]
mov edx, dword [rax]
mov rax, qword [0x6bb809d0]
mov dword [rax], edx
mov rax, qword [0x6bb80820]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [str.Z2iy]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbp
mov ecx, 0xd822f4a5
call fcn.6bad9c90
mov rdx, qword [0x6bb80570]
mov ecx, 0xd528b361
mov dword [rdx], eax
mov rax, qword [0x6bb80fc0]
mov edx, dword [rax]
mov rax, qword [0x6bb80b00]
mov dword [rax], edx
call fcn.6bad9c90
mov r11, qword [0x6bb811a0]
xor ecx, ecx
mov dword [r11], eax
call rbx
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
lea rcx, str.Nobis_voluptate_rerum_voluptatem_atque_magni_aut_nesciunt_animi_in
call r12
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80a80]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb80a90]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0xde024cf3
call fcn.6bad9c90
mov rdx, qword [0x6bb81180]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor ecx, ecx
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov rax, qword [rsp + 0x50]
xor r8d, r8d
xor edx, edx
call rax
mov rax, qword [0x6bb807c0]
xor ecx, ecx
mov dword [rax], 0xb0c00569
mov rax, qword [0x6bb805c0]
mov dword [rax], 0xc9fa988
call rsi
inc qword [rsp + 0x40]
jmp 0x6bad6944
cmp eax, 0x596f
jne 0x6bad8aa1
mov rbp, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call rbp
mov rdi, qword [0x6bb80eb0]
xor r8d, r8d
xor edx, edx
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
mov dword [rdi], 0x60894b70
call rbx
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80b30]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb806e0]
mov r15, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov dword [rsi], eax
call r15
mov rax, qword [0x6bb80700]
mov rsi, qword [0x6bb808d0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb80e40]
mov dword [rax], 0x842ff537
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x88], rax
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
mov ecx, 0x78d0754b
call fcn.6bad9c90
mov rdx, qword [0x6bb80ef0]
lea rcx, str.Pariatur_dolorum_neque_quidem_recusandae_sit_ut_quam
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x6bb80f10]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb806a0]
mov ecx, 0xa347460
mov dword [rdx], eax
call fcn.6bad9c90
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x6bb80dd0]
mov dword [rax], 0x9fa09c5
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x6bb80d70]
mov rdi, qword [0x6bb80650]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x6bb80e50]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x6736d565
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov qword [rsp + 0x48], rax
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
lea r8, str.Ducimus_aut_quod
xor ecx, ecx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
lea r8, str.Excepturi_facere_rem_qui_culpa_voluptatem_repellat_aperiam_totam_aliquid_omnis_sit
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0x98], r10
call r10
mov rdi, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rdi
mov ecx, 0x9164d343
call fcn.6bad9c90
mov rdx, qword [0x6bb80890]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x6bb808e0]
mov ecx, 0x830b8cf4
mov edx, dword [rax]
mov rax, qword [0x6bb81170]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80f70]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80c60]
mov dword [rax], 0x66f09dbc
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x78], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
xor ecx, ecx
call rsi
mov r12, qword [0x6bb80940]
mov r13, qword [0x6bb805c0]
mov rax, qword [0x6bb80520]
mov ecx, dword [r12]
mov dword [r13], 0xba9b90b2
mov dword [rax], 0x8fabfc30
call fcn.6bad9c90
mov rcx, qword [0x6bb80820]
mov rdx, qword [0x6bb80f50]
mov dword [r13], 0xc909a7a8
mov dword [rcx], eax
mov rax, qword [0x6bb80b80]
mov ecx, 0x8845ac24
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80c70]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r12]
mov rax, qword [0x6bb80900]
mov dword [rax], edx
call r15
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80ee0]
mov ecx, 0x456e1e43
mov edx, dword [rax]
mov rax, qword [0x6bb80960]
mov dword [rax], edx
call fcn.6bad9c90
mov r14, qword [0x6bb805d0]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [r14], eax
call rbx
lea rcx, str.TheaSawayn
mov rax, qword [rsp + 0x50]
call rax
mov r13, qword [0x6bb80ae0]
mov r12, qword [0x6bb807b0]
xor ecx, ecx
mov dword [r14], 0x3fa56bb
mov eax, dword [r13]
mov dword [r12], eax
call rdi
mov rax, qword [0x6bb80e90]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d40]
xor ecx, ecx
mov dword [r12], 0x9d23a2e7
mov dword [rdx], eax
mov rax, qword [0x6bb80580]
mov dword [rax], 0x5cabee3c
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x6bb80f10]
mov ecx, 0x4ea97eb6
mov dword [rax], 0x45de8a34
call fcn.6bad9c90
mov rdx, qword [0x6bb80a80]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov ecx, 0xa3f846a4
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov r14, qword [0x6bb80730]
mov rcx, qword [0x6bb80540]
mov r12, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [r14], eax
mov rax, qword [0x6bb809d0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb81000]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf28e47ac
call rbx
mov ecx, 0xeedc6d04
call fcn.6bad9c90
mov rdx, qword [0x6bb80ea0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80ed0]
mov edx, dword [rax]
mov rax, qword [0x6bb80fc0]
mov dword [rax], edx
mov rax, qword [0x6bb81100]
xor edx, edx
mov dword [rax], 0x28ab4213
call rsi
mov rax, qword [0x6bb80e90]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb80e40]
mov ecx, 0x8e5ed414
mov dword [rax], 0xe1661672
call fcn.6bad9c90
mov rdx, qword [0x6bb809e0]
xor ecx, ecx
mov dword [rdx], eax
call r15
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb81130]
mov rdx, qword [0x6bb808d0]
xor ecx, ecx
mov r10, qword [rsp + 0x98]
mov eax, dword [rax]
mov dword [rdx], eax
call r10
mov rax, qword [0x6bb81190]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81050]
mov dword [rax], edx
mov rax, qword [0x6bb80f50]
mov edx, dword [rax]
mov rax, qword [0x6bb80690]
mov dword [rax], edx
call rdi
mov rax, qword [0x6bb80ec0]
xor ecx, ecx
mov dword [rax], 0x88883e7b
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80520]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x8f1c9494
mov dword [rsp + 0x20], 0
call r12
xor ecx, ecx
xor edx, edx
mov rax, qword [rsp + 0x48]
call rax
mov r11, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rax, qword [0x6bb80fb0]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x98], r11
mov dword [rax], 0x3d3a20e3
call r11
mov r14, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb80580]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81020]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
lea rcx, str.WalkerWaelchi
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0xb6f4710a
call fcn.6bad9c90
mov rcx, qword [0x6bb806e0]
xor edx, edx
mov dword [rcx], eax
lea rcx, str.LionelTorphy
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov ecx, 0xe3904c09
call fcn.6bad9c90
mov rdx, qword [0x6bb81120]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r12
mov ecx, 0x39c31ed5
call fcn.6bad9c90
mov rdx, qword [0x6bb80b10]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov r10, qword [0x6bb807d0]
mov edx, dword [r13]
mov rax, qword [0x6bb80610]
mov dword [rax], edx
mov eax, dword [r10]
mov rdx, qword [0x6bb808e0]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rbp
lea rcx, str.Dolores_nostrum_quas_aut_sequi_omnis_suscipit_ut_rerum
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, 0xdb9b5444
call fcn.6bad9c90
mov rdx, qword [0x6bb80d60]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80cb0]
mov dword [rax], 0xcfdc07c6
mov rax, qword [rsp + 0x40]
call rax
mov r15, qword [0x6bb81110]
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x6bb80ef0]
mov eax, dword [r15]
mov dword [rcx], eax
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x6bb80500]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80e30]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
mov r11, qword [rsp + 0x98]
xor edx, edx
xor ecx, ecx
call r11
mov rax, qword [0x6bb81160]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80510]
mov dword [rax], edx
call rdi
mov rax, qword [0x6bb805a0]
mov ecx, 0x7c76f165
mov edx, dword [rax]
mov rax, qword [0x6bb80b70]
mov dword [rax], edx
mov rax, qword [0x6bb80910]
mov eax, dword [rax]
mov dword [r15], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80c90]
mov dword [rdx], eax
mov rax, qword [0x6bb809d0]
mov dword [rax], 0x80e63023
mov rax, qword [0x6bb80a30]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d70]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80650]
lea rcx, str.Odio_repellat_error_esse_nemo_magnam
mov edx, dword [rax]
mov rax, qword [0x6bb81040]
mov dword [rax], edx
lea rdx, str.Rem_incidunt_dolor
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
xor edx, edx
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb80a20]
mov ecx, 0x93ae3a66
mov eax, dword [rax]
mov dword [r13], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb805f0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call r14
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x6bb80b50]
mov r10, qword [0x6bb807d0]
lea rcx, str.DrEdnaJohnsonJr
mov eax, dword [rax]
mov dword [r10], eax
mov rax, qword [0x6bb80f60]
mov dword [rax], 0x3c962107
mov rax, qword [rsp + 0x50]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80ce0]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x6bb80e90]
mov eax, dword [rax]
mov dword [rbx], eax
call rsi
mov ecx, 0xfa11c0c0
call fcn.6bad9c90
mov dword [r13], eax
mov rax, qword [0x6bb80820]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80e70]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [rsp + 0x40]
xor ecx, ecx
call rax
mov rax, qword [0x6bb80a70]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rax], 0x68183144
mov rax, qword [0x6bb810b0]
mov edx, dword [rax]
mov rax, qword [0x6bb80970]
mov dword [rax], edx
mov rax, qword [0x6bb80db0]
mov dword [rax], 0x5c652519
mov rax, qword [0x6bb80980]
mov edx, dword [rax]
mov rax, qword [0x6bb80a50]
mov dword [rax], edx
mov rax, qword [0x6bb81010]
mov edx, dword [rax]
mov rax, qword [0x6bb810a0]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [rsp + 0x68]
xor ecx, ecx
call rax
mov eax, dword [r15]
mov rdi, qword [0x6bb80540]
mov dword [rdi], eax
mov rdx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x80]
lea r9, [rsp + 0xbc]
mov r8d, 0x20
call fcn.6bad46f2
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x7a9f
jle 0x6bad9393
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rdi
mov rbx, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.VanceMcDermott
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80d60]
lea r8, str.NashSauer
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80920]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb806d0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x68435f50
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x6bb80e10]
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rax], 0x255fde59
call r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x6bb806e0]
xor edx, edx
xor ecx, ecx
mov rsi, qword [0x6bb810f0]
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov eax, dword [rax]
mov dword [rsi], eax
call r14
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [str.eNl.h_Q]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb809e0]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x6bb808a0]
xor edx, edx
lea rcx, str.WilhelmSchneider
mov dword [rax], 0x9d9e85df
call rbx
xor ecx, ecx
call r12
mov rax, qword [0x6bb806a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80cc0]
mov dword [rax], edx
call rdi
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x70], r10
call r10
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x6bb80e70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb810c0]
mov rsi, qword [0x6bb81030]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb81010]
mov dword [rax], 0xb1dd808d
mov rax, qword [0x6bb80620]
mov eax, dword [rax]
mov dword [rsi], eax
call rbp
mov rsi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
lea rcx, str.DaphneyKulasIV
call rbx
mov ecx, 0x86c80c9d
call fcn.6bad9c90
mov rdx, qword [0x6bb807d0]
mov r15, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov ecx, 0x253d5224
call fcn.6bad9c90
mov rcx, qword [0x6bb80ac0]
mov dword [rcx], eax
mov rax, qword [0x6bb80e80]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80ab0]
mov r13, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rdx], eax
call r13
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80b70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80510]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x6bb80df0]
mov rdx, qword [0x6bb81040]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call r15
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80e40]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc1ea6d82
call rsi
mov rax, qword [0x6bb807a0]
mov r10, qword [rsp + 0x70]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb806b0]
mov dword [rax], edx
mov rax, qword [0x6bb80730]
mov dword [rax], 0xbf5d14a9
mov rax, qword [0x6bb80ef0]
mov edx, dword [rax]
mov rax, qword [0x6bb809b0]
mov dword [rax], edx
mov rax, qword [0x6bb810a0]
mov dword [rax], 0x562a5e40
call r10
mov rax, qword [0x6bb81090]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80640]
mov dword [rax], edx
mov rax, qword [0x6bb80fc0]
xor edx, edx
mov dword [rax], 0xab135630
call rsi
mov rax, qword [0x6bb80540]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xe1b523e4
call rsi
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb80780]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xe7838cea
call rsi
xor ecx, ecx
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov r11, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
mov r14, qword [0x6bb809f0]
mov rax, qword [0x6bb80db0]
mov qword [rsp + 0x78], r11
mov dword [r14], 0x8e95a8d7
mov dword [rax], 0x706d50cb
call r11
lea r8, str.Corporis_laboriosam_sunt_sed_beatae_ipsum_quibusdam_harum_non_dolore_aperiam_suscipit
xor edx, edx
mov rax, qword [rsp + 0x48]
xor ecx, ecx
call rax
mov rax, qword [0x6bb80550]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80890]
mov rcx, qword [0x6bb80b60]
mov dword [rdx], eax
mov rax, qword [0x6bb80610]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.MrBraedenManteMD
call rbx
xor r9d, r9d
xor r8d, r8d
mov r12, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb80ae0]
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80aa0]
mov qword [rsp + 0x70], r10
mov dword [rax], edx
call r10
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80d40]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80b00]
mov dword [rax], edx
call rdi
mov rax, qword [0x6bb80660]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80850]
mov dword [rax], edx
call rbp
mov rax, qword [0x6bb80f10]
mov rdx, qword [0x6bb81030]
xor ecx, ecx
mov dword [r14], 0x6a26ca08
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x6bb81000]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb805b0]
lea rdx, str.Voluptatem_iure_eaque_eos
mov dword [rcx], eax
lea rcx, str.Ducimus_sunt_dolores_porro
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x6bb807e0]
mov r14, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Non_quas_corrupti_reiciendis_occaecati
mov edx, dword [rax]
mov rax, qword [0x6bb805a0]
mov dword [rax], edx
mov rax, qword [0x6bb806d0]
mov rdx, qword [0x6bb809e0]
mov eax, dword [rax]
mov dword [rdx], eax
call r14
mov r10, qword [rsp + 0x70]
xor ecx, ecx
call r10
mov rax, qword [0x6bb80b60]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80580]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x6bb810e0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x537cc910
call r15
mov ecx, 0x82c75759
call fcn.6bad9c90
mov rdx, qword [0x6bb80ce0]
mov ecx, 0x92826e2
mov dword [rdx], eax
mov rax, qword [0x6bb80a50]
mov edx, dword [rax]
mov rax, qword [0x6bb80af0]
mov dword [rax], edx
mov rax, qword [0x6bb810f0]
mov edx, dword [rax]
mov rax, qword [0x6bb80fe0]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80d50]
lea rcx, str.ShermanNader
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Molestiae_tenetur_quia_ea_rem
call r14
mov rax, qword [0x6bb80fd0]
lea rcx, str.Quam_mollitia_blanditiis_voluptates_non
mov edx, dword [rax]
mov rax, qword [0x6bb80e00]
mov dword [rax], edx
xor edx, edx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0x7d4970c6
call fcn.6bad9c90
mov rcx, qword [0x6bb80e40]
mov dword [rcx], eax
mov rax, qword [0x6bb80ee0]
xor ecx, ecx
mov dword [rax], 0xbcd70ad5
call rbp
mov rax, qword [0x6bb807c0]
mov r15, qword [0x6bb81110]
xor edx, edx
lea rcx, str.Et_quod_ipsam_sed_voluptatem_at_vel_et_est
mov eax, dword [rax]
mov dword [r15], eax
call rbx
mov ecx, dword [r15]
call fcn.6bad9c90
mov rdx, qword [0x6bb81040]
mov dword [rdx], eax
mov rax, qword [0x6bb80ac0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb809e0]
mov dword [rcx], eax
xor ecx, ecx
call rbp
mov rax, qword [0x6bb81160]
mov r11, qword [rsp + 0x78]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xe96358d2
call r11
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
lea rcx, str.MitchelVandervort
call r14
xor edx, edx
lea rcx, str.RoxaneRutherfordI
call rbx
lea r8, str.MaybelleLynch
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80a40]
xor edx, edx
lea rcx, str.KurtPagac
mov dword [rax], 0xc3492d08
call rbx
mov rax, qword [0x6bb806f0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb80980]
mov ecx, 0xe0ce5987
mov dword [rax], 0x5a3a9f87
mov rax, qword [0x6bb80670]
mov dword [rax], 0xb6e8836d
mov rax, qword [0x6bb80950]
mov dword [rax], 0x365f4f5a
mov rax, qword [0x6bb80990]
mov dword [rax], 0x1dd10ddb
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb807c0]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r12
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb807e0]
mov dword [rax], 0xa835204a
mov rax, qword [0x6bb80de0]
mov edx, dword [rax]
mov rax, qword [0x6bb80720]
mov dword [rax], edx
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x46d91c50
call fcn.6bad9c90
mov rsi, qword [0x6bb807c0]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [rsi], eax
mov rax, qword [0x6bb81080]
mov rsi, qword [0x6bb80820]
mov dword [rax], 0x1b7d6016
mov rax, qword [0x6bb80c80]
mov eax, dword [rax]
mov dword [rsi], eax
call rbx
mov rax, qword [0x6bb808c0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x313ef4d6
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb80a00]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80700]
mov r10, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rdx], eax
call r10
xor ecx, ecx
call rdi
mov ecx, 0x187405cc
call fcn.6bad9c90
xor r8d, r8d
xor r9d, r9d
xor ecx, ecx
mov rdx, qword [0x6bb810b0]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb81150]
mov ecx, 0x8fd3579c
mov edx, dword [rax]
mov rax, qword [0x6bb80da0]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb809a0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80b80]
mov edx, dword [rax]
mov rax, qword [0x6bb80cd0]
mov dword [rax], edx
mov rax, qword [0x6bb81090]
mov dword [rax], 0x8bc70fc6
call r13
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb80d40]
mov ecx, dword [rsi]
mov dword [rax], 0x91054ce4
call fcn.6bad9c90
mov rdx, qword [0x6bb80630]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x6bb80870]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80690]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb805b0]
mov rbx, qword [0x6bb80e80]
mov ecx, 0x38330071
mov edx, dword [rax]
mov rax, qword [0x6bb80790]
mov dword [rax], edx
mov rax, qword [0x6bb80d00]
mov eax, dword [rax]
mov dword [rbx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb810d0]
mov dword [rdx], eax
mov qword [rsp + 0x28], 0
mov r9, qword [rsp + 0x80]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
lea r8, [0x6bad4d30]
call fcn.6bad2361
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x6b26
jne 0x6bad9c70
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x6bb80b50]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80f70]
mov dword [rdx], eax
mov rax, qword [0x6bb80dd0]
xor edx, edx
mov dword [rax], 0xb71773a1
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov qword [rsp + 0x60], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rbx
mov ecx, 0x5ca3770d
call fcn.6bad9c90
mov rsi, qword [0x6bb80a90]
xor ecx, ecx
mov dword [rsi], eax
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb80ef0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2b9125df
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80d10]
xor ecx, ecx
mov dword [rax], 0xe1738817
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov qword [rsp + 0x50], rax
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80830]
mov rdi, qword [0x6bb80770]
mov ecx, 0x89b62e67
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb80800]
mov rdi, qword [0x6bb81070]
mov edx, dword [rax]
mov rax, qword [0x6bb809c0]
mov dword [rdi], 0x9211c9d5
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80b70]
mov rbx, qword [0x6bb80920]
mov dword [rdx], eax
mov rax, qword [0x6bb80530]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x6bb80600]
mov dword [rax], 0xd4022959
mov rax, qword [0x6bb811a0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb80e40]
xor edx, edx
xor ecx, ecx
lea r8, str.Quibusdam_iure_eveniet_voluptatem_temporibus_non_aliquam
mov r14, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [rbx], eax
mov rax, qword [0x6bb80600]
mov dword [rax], 0xa1ecbe79
call r14
mov ecx, 0x9109e539
call fcn.6bad9c90
mov rbx, qword [0x6bb80fb0]
mov ecx, 0xe395761a
mov dword [rbx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80570]
mov dword [rdx], eax
mov rax, qword [0x6bb80890]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb81010]
xor ecx, ecx
mov dword [rbx], eax
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
call rbx
mov rax, qword [0x6bb810d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r11, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.ProfAnjaliJones
mov dword [rdi], eax
mov qword [rsp + 0x88], r11
call r11
mov r15, qword [0x6bb80ff0]
mov rax, qword [0x6bb80ab0]
lea rcx, str.LeslieRippinI
mov r13, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov edx, dword [r15]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x6bb807e0]
xor ecx, ecx
mov dword [rax], 0xb6bbef3d
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x68], rax
call rax
xor edx, edx
lea rcx, str.MrKamronKoss
call r13
lea rdx, str.Id_molestiae_maxime_nesciunt_libero
lea rcx, str.Perspiciatis_magni_dolorem_nostrum_nam_et_cum_qui_rerum
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Consectetur_dicta_incidunt_ut_repudiandae_ipsum_qui_voluptas_suscipit_totam_eligendi_quo
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x6bb808b0]
xor ecx, ecx
mov dword [rax], 0x974debb7
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov qword [rsp + 0x70], rax
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rdi
mov rbp, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80fd0]
xor edx, edx
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rax], 0xeb4b66a0
call r12
mov rax, qword [0x6bb80e90]
mov dword [rax], 0x94cfbc66
mov rax, qword [0x6bb80d70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80b00]
lea r8, str.DrBrooksBechtelarIV
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x6bb80e50]
xor ecx, ecx
mov dword [rax], 0xb4da3243
call rbx
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rax, qword [0x6bb80780]
xor ecx, ecx
mov qword [rsp + 0x80], r10
mov dword [rax], 0x1815c6b5
call r10
mov rax, qword [0x6bb806e0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a30]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80ef0]
mov edx, dword [rax]
mov rax, qword [0x6bb80970]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov ecx, 0x57079a25
call fcn.6bad9c90
mov rdi, qword [0x6bb80920]
xor ecx, ecx
mov dword [rdi], eax
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
call rdi
mov ecx, 0xf06b716a
call fcn.6bad9c90
mov rcx, qword [0x6bb80a00]
xor edx, edx
lea r8, str.Iure_quisquam_et_quasi_dicta
mov dword [rcx], eax
mov rax, qword [0x6bb81130]
xor ecx, ecx
mov dword [rax], 0x9f9abafc
call r14
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x78], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, dword [rsi]
call fcn.6bad9c90
mov rdx, qword [0x6bb80dd0]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x6bb806e0]
mov r14, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov dword [rdx], eax
mov rax, qword [0x6bb807c0]
xor edx, edx
mov dword [rax], 0xd6dbce5b
mov eax, dword [r15]
mov dword [rcx], eax
mov rax, qword [0x6bb80960]
xor ecx, ecx
mov dword [rax], 0x3173b131
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r14
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb80510]
mov rdx, qword [0x6bb80770]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rdi
mov ecx, 0x97f2cb7
call fcn.6bad9c90
mov rdx, qword [0x6bb80900]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x6bb80890]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x68cd69f8
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call rbx
xor ecx, ecx
call rbx
mov r15, qword [0x6bb81110]
mov ecx, dword [r15]
call fcn.6bad9c90
mov dword [rsi], eax
mov rax, qword [0x6bb808b0]
mov dword [rax], 0x285b2424
mov rax, qword [0x6bb80590]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80e10]
lea rcx, str.Ut_omnis_dolores_eaque
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x6bb80e40]
xor ecx, ecx
mov dword [r15], 0x990d146d
mov edx, dword [rax]
mov rax, qword [0x6bb81210]
mov dword [rax], edx
call rbx
mov edx, dword [rsi]
mov rax, qword [0x6bb805e0]
mov rcx, qword [0x6bb806b0]
mov dword [rax], edx
mov rax, qword [0x6bb80690]
mov edx, dword [rax]
mov rax, qword [0x6bb80870]
mov dword [rax], edx
mov rax, qword [0x6bb805b0]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xe2a4f5d2
call fcn.6bad9c90
mov rdx, qword [0x6bb80890]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
mov r15, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call r15
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80700]
lea rcx, str.ElvisHomenick
mov edx, dword [rax]
mov rax, qword [0x6bb809b0]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x6bb809a0]
mov ecx, 0x692f4321
mov dword [rax], 0xc83ec17d
mov rax, qword [0x6bb80b50]
mov edx, dword [rax]
mov rax, qword [0x6bb80ce0]
mov dword [rax], edx
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x6bb80f60]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x20], 0
call rax
mov r11, qword [rsp + 0x88]
lea rcx, str.DrEthelBayerI
call r11
xor edx, edx
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0xd7d5ca31
call fcn.6bad9c90
mov rdx, qword [0x6bb81090]
mov dword [rdx], eax
mov rax, qword [0x6bb80610]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80f60]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb810f0]
xor edx, edx
mov dword [rax], 0x470fb78f
call r15
mov rax, qword [0x6bb81010]
xor ecx, ecx
mov dword [rax], 0x74c9324b
mov rax, qword [str.eNl.h_Q]
mov dword [rax], 0xef3582ab
mov rax, qword [0x6bb80650]
mov dword [rax], 0x84da79c3
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb808f0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb809a0]
mov dword [rax], 0x25a2ad9e
mov rax, qword [0x6bb808b0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d90]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
xor r8d, r8d
mov rax, qword [rsp + 0x78]
xor edx, edx
xor ecx, ecx
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x6bb80d40]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xddd67064
call rbp
xor edx, edx
lea rcx, str.MsAutumnNolan
call r13
mov rax, qword [0x6bb80a40]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d00]
mov rsi, qword [0x6bb80b50]
mov dword [rdx], eax
mov rax, qword [0x6bb80d10]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [str.:_]
mov edx, dword [rax]
mov rax, qword [0x6bb80b40]
mov dword [rax], edx
mov rax, qword [0x6bb80d50]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80500]
lea rcx, str.Perferendis_animi_esse_et
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80a00]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80ad0]
mov dword [rax], edx
mov rax, qword [0x6bb80b10]
xor edx, edx
mov dword [rax], 0x4fc8e06d
mov rax, qword [0x6bb80600]
mov dword [rax], 0xec801992
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x20], 0
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x6bb80b80]
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [0x6bb80700]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x20], 0
call rax
mov ecx, 0x4b00abfc
call fcn.6bad9c90
mov rsi, qword [str.eNl.h_Q]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x6bb80890]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80fe0]
mov dword [rax], edx
mov rax, qword [0x6bb80fb0]
mov dword [rax], 0xec1b9763
call qword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, 0x8f11f91a
call fcn.6bad9c90
mov rbx, qword [0x6bb80960]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rbx], eax
mov rax, qword [0x6bb80510]
mov dword [rax], 0xb226c3bc
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x6bb806b0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80640]
xor ecx, ecx
mov dword [rdx], eax
call rdi
lea rcx, str.ConorKovacek
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80930]
mov r10, qword [rsp + 0x80]
xor ecx, ecx
mov dword [rax], 0xf2a797c2
call r10
nop
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret