Function at 0x14010d110
Capabilities:
Delete file
Hash data with crc32

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3e8]
sub rsp, 0x4b0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov r13, rcx
xor esi, esi
mov eax, dword [0x140391ea0]
test al, 1
jne 0x14010d190
or eax, 1
mov dword [0x140391ea0], eax
xorps xmm0, xmm0
movups xmmword [0x1403921c0], xmm0
mov qword [0x1403921d0], rsi
mov qword [0x1403921d8], 0xf
mov byte [0x1403921c0], sil
lea rcx, [0x140125340]
call fcn.140096500
nop
mov eax, dword [0x140391ea0]
test al, 2
jne 0x14010d1d3
or eax, 2
mov dword [0x140391ea0], eax
xorps xmm0, xmm0
movups xmmword [0x140391e48], xmm0
mov qword [0x140391e58], rsi
mov qword [0x140391e60], 0xf
mov byte [0x140391e48], 0
lea rcx, [0x1401252d0]
call fcn.140096500
nop
mov eax, dword [0x140391ea0]
test al, 4
jne 0x14010d210
or eax, 4
mov dword [0x140391ea0], eax
xorps xmm0, xmm0
movups xmmword [0x140392110], xmm0
mov qword [0x140392120], rsi
mov qword [0x140392128], 0xf
mov byte [0x140392110], 0
lea rcx, [0x140125260]
call fcn.140096500
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rsi
mov qword [rbp + 0x158], rsi
mov ecx, Ordinal_50
call fcn.14009629c
mov rcx, rax
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x150], reloc.WLDAP32.dll_Ordinal_41
mov qword [rbp + 0x158], gethostname
movups xmm0, xmmword [str.C:WindowsSysWOW64ComPoliciOflinne.dat]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140337db8]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x140337dc8]
movsd qword [rax + 0x20], xmm0
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rcx + 0x28], al
mov byte [rcx + 0x29], 0
movss xmm7, dword [0x140339314]
mov dword [rbp + 0x3f8], 0x43af0000
mov dword [rbp + 0x3fc], 0x43480000
mov rbx, qword [0x140390b10]
mov rax, qword [rbx + 0x4038]
movss xmm2, dword [rax + 0x30]
movss xmm0, dword [rax + 0x34]
subss xmm0, dword [0x1403392f0]
mulss xmm0, dword [0x140339188]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm0
subss xmm2, xmm7
mulss xmm2, dword [0x140339188]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm2, xmm0
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
lea r14, [0x1403921c0]
xorps xmm9, xmm9
movss xmm8, dword [0x140339390]
lea r12, [0x140391128]
movdqa xmm6, xmmword [0x140339400]
movabs r15, 0x7fffffffffffffff
cmp byte [0x14039186d], 0
jne 0x14010e703
lea rcx, [0x140390ef0]
call fcn.14008b1c0
cmp byte [0x140391120], 0
jne 0x14010d4f0
mov rdi, qword [0x1403921d8]
cmp rdi, 0x38
jb 0x14010d3b1
mov rbx, r14
cmp rdi, 0xf
cmova rbx, qword [0x1403921c0]
mov qword [0x1403921d0], 0x38
mov r8d, gethostname
lea rdx, str.Failed_to_initialize_auth._Please_check_your_connection.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x38], 0
jmp 0x14010d4b6
mov rcx, rdi
shr rcx, 1
mov rax, r15
sub rax, rcx
cmp rdi, rax
jbe 0x14010d3d5
mov rsi, r15
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14010d408
lea rax, [rdi + rcx]
mov esi, 0x3f
cmp rax, rsi
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14010d3f2
xor ebx, ebx
jmp 0x14010d42f
cmp rcx, 0x1000
jb 0x14010d427
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14010f6fd
mov rcx, rax
call fcn.14009629c
test rax, rax
je 0x14010d650
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14010d42f
call fcn.14009629c
mov rbx, rax
mov qword [0x1403921d0], 0x38
mov qword [0x1403921d8], rsi
movups xmm0, xmmword [str.Failed_to_initialize_auth._Please_check_your_connection.]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [0x140337d78]
movups xmmword [rbx + 0x10], xmm1
movups xmm0, xmmword [0x140337d88]
movups xmmword [rbx + 0x20], xmm0
movsd xmm0, qword [0x140337d98]
movsd qword [rbx + 0x30], xmm0
mov byte [rbx + 0x38], 0
cmp rdi, 0xf
jbe 0x14010d4ad
lea rdx, [rdi + 1]
mov rcx, qword [0x1403921c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010d4a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010d650
call fcn.140096518
xor esi, esi
mov qword [0x1403921c0], rbx
movdqa xmm0, xmmword [0x140339880]
movups xmmword [0x14038d958], xmm0
mov byte [0x14039185c], 1
mov dword [0x14038d98c], 0
mov byte [0x14039186d], 1
mov byte [0x140391850], 1
mov rbx, qword [0x140390b10]
jmp 0x14010e710
lea rcx, [0x140390ef0]
call fcn.140084530
test al, al
je 0x14010d685
mov rdi, qword [0x1403921d8]
cmp rdi, 0x52
jb 0x14010d549
mov rbx, r14
cmp rdi, 0xf
cmova rbx, qword [0x1403921c0]
mov qword [0x1403921d0], 0x52
mov r8d, 0x52
lea rdx, str.Youre_banned_from_the_cheat__join_discord.gg_saytus_if_you_think_can_be_an_error.
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x52], 0
jmp 0x14010d665
mov rcx, rdi
shr rcx, 1
mov rax, r15
sub rax, rcx
cmp rdi, rax
jbe 0x14010d58a
mov rsi, r15
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14009629c
test rax, rax
je 0x14010d650
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14010d5c7
lea rax, [rdi + rcx]
mov esi, 0x5f
cmp rax, rsi
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14010d5a7
xor ebx, ebx
jmp 0x14010d5c7
cmp rcx, 0x1000
jb 0x14010d5bf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14010f6fd
jmp 0x14010d56b
call fcn.14009629c
mov rbx, rax
mov qword [0x1403921d0], 0x52
mov qword [0x1403921d8], rsi
movaps xmm0, xmmword [str.Youre_banned_from_the_cheat__join_discord.gg_saytus_if_you_think_can_be_an_error.]
movups xmmword [rbx], xmm0
movaps xmm1, xmmword [0x140337df0]
movups xmmword [rbx + 0x10], xmm1
movaps xmm0, xmmword [0x140337e00]
movups xmmword [rbx + 0x20], xmm0
movaps xmm1, xmmword [0x140337e10]
movups xmmword [rbx + 0x30], xmm1
movaps xmm0, xmmword [0x140337e20]
movups xmmword [rbx + 0x40], xmm0
movzx eax, word [0x140337e30]
mov word [rbx + 0x50], ax
mov byte [rbx + 0x52], 0
cmp rdi, 0xf
jbe 0x14010d65c
lea rdx, [rdi + 1]
mov rcx, qword [0x1403921c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010d657
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14010d657
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096518
xor esi, esi
mov qword [0x1403921c0], rbx
movdqa xmm0, xmmword [0x140339880]
movups xmmword [0x14038d958], xmm0
mov byte [0x14039185c], 1
mov dword [0x14038d98c], 0
lea rcx, [0x140390ef0]
call fcn.140083780
lea rax, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rax, qword [rbp + 0x140]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x150]
mov qword [rsp + 0x48], rax
call fcn.140095c08
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp + 0x2e0]
call fcn.140027a80
nop
lea rcx, [rbp + 0x2e0]
cmp qword [rbp + 0x2f8], 7
cmova rcx, qword [rbp + 0x2e0]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0xc0]
call fcn.140095f1c
mov r8d, eax
test eax, eax
jne 0x14010d764
mov edx, dword [rbp + 0xd0]
test dl, 1
mov ecx, 0x1ff
mov eax, 0x16d
cmovne ecx, eax
mov dword [rsp + 0x44], ecx
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x14010d759
mov eax, dword [rbp + 0xd4]
cmp eax, 0xa000000c
jne 0x14010d74b
mov edx, 4
jmp 0x14010d787
cmp eax, 0xa0000003
jne 0x14010d759
mov edx, 0xa
jmp 0x14010d787
shr edx, 4
and edx, 1
or edx, 2
jmp 0x14010d787
mov dword [rsp + 0x44], 0xffff
sub eax, 2
je 0x14010d782
sub eax, 1
je 0x14010d782
sub eax, 0x32
je 0x14010d782
cmp eax, 0x46
mov edx, esi
jne 0x14010d787
mov edx, 1
mov dword [rsp + 0x40], r8d
lea rax, [0x14038d968]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
test edx, edx
je 0x14010e01b
cmp edx, 1
setne bl
lea rcx, [rbp + 0x2e0]
call fcn.140004c20
test bl, bl
je 0x14010e6e7
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x310]
call fcn.14010f730
nop
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x400], rax
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0xc0]
call fcn.140004a20
mov rbx, rax
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x160]
call fcn.140004a20
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x140390ef0]
call fcn.14008d680
cmp byte [0x140391120], 0
je 0x14010e02b
cmp r14, r12
je 0x14010d857
mov rdx, r12
cmp qword [0x140391140], 0xf
cmova rdx, qword [0x140391128]
mov r8, qword [0x140391138]
mov rcx, r14
call fcn.14000a980
lea rcx, [rbp + 0x240]
call fcn.1401108a0
nop
lea rcx, [rbp + 0x160]
call fcn.1401104b0
nop
lea rcx, [rbp + 0x1c0]
call fcn.140110760
nop
lea rcx, [rbp + 0x1a0]
call fcn.140110610
nop
lea rdx, [0x140390fd0]
lea rcx, [rbp + 0x60]
call fcn.140004a20
nop
lea rdx, [0x140390fb0]
lea rcx, [rsp + 0x60]
call fcn.140004a20
nop
lea rcx, [rbp + 0x180]
call fcn.1401111e0
nop
mov rax, r15
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 0x94
jb 0x14010f71c
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], __WSAFDIsSet
lea r9, str._embeds_:___title_:__Inicio_de_sesion_exitoso____description_:__Detalles_del_usuario____color_:_3066993___fields_:___name_:__Usuario____value_:__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x3f8]
lea rcx, [rbp]
call fcn.14000e1e0
nop
mov r8d, Ordinal_50
lea rdx, str.____inline_:_true___name_:__Status____value_:__
lea rcx, [rbp]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, r14
cmp qword [0x1403921d8], 0xf
cmova rdx, qword [0x1403921c0]
mov r8, qword [0x1403921d0]
lea rcx, [rbp - 0x20]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_45
lea rdx, str.____inline_:_true___name_:__IP____value_:__
lea rcx, [rbp - 0x40]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, gethostname
lea rdx, str.____inline_:_false___name_:__Processor____value_:__
lea rcx, [rbp + 0x40]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x240]
cmp qword [rbp + 0x258], 0xf
cmova rdx, qword [rbp + 0x240]
mov r8, qword [rbp + 0x250]
lea rcx, [rbp + 0x20]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, str.____inline_:_false___name_:__Processor_ID____value_:__
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x120]
call fcn.14000b770
nop
lea r8, [rbp + 0x160]
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__Graphics_Card____value_:__
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14000b770
nop
lea r8, [rbp + 0x1c0]
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__Disk_Serial_Number____value_:__
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.14000b770
nop
lea r8, [rbp + 0x1a0]
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__SID____value_:__
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.14000b770
nop
lea r8, [rbp + 0x180]
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.14000b7e0
nop
lea r8, [0x140337dd4]
mov rdx, rax
lea rcx, [rbp + 0x200]
call fcn.14000b770
nop
mov r8, qword [rbp + 0x2b8]
cmp r8, 0xf
jbe 0x14010dbbd
mov rdx, qword [rbp + 0x2a0]
lea rcx, [rbp + 0x2a0]
call fcn.1400034c0
movdqu xmmword [rbp + 0x2b0], xmm6
mov byte [rbp + 0x2a0], 0
mov r8, qword [rbp + 0x278]
cmp r8, 0xf
jbe 0x14010dbec
mov rdx, qword [rbp + 0x260]
lea rcx, [rbp + 0x260]
call fcn.1400034c0
movdqu xmmword [rbp + 0x270], xmm6
mov byte [rbp + 0x260], 0
mov r8, qword [rbp + 0x238]
cmp r8, 0xf
jbe 0x14010dc1b
mov rdx, qword [rbp + 0x220]
lea rcx, [rbp + 0x220]
call fcn.1400034c0
movdqu xmmword [rbp + 0x230], xmm6
mov byte [rbp + 0x220], 0
mov r8, qword [rbp + 0x298]
cmp r8, 0xf
jbe 0x14010dc4a
mov rdx, qword [rbp + 0x280]
lea rcx, [rbp + 0x280]
call fcn.1400034c0
movdqu xmmword [rbp + 0x290], xmm6
mov byte [rbp + 0x280], 0
mov r8, qword [rbp + 0x1f8]
cmp r8, 0xf
jbe 0x14010dc79
mov rdx, qword [rbp + 0x1e0]
lea rcx, [rbp + 0x1e0]
call fcn.1400034c0
movdqu xmmword [rbp + 0x1f0], xmm6
mov byte [rbp + 0x1e0], 0
mov r8, qword [rbp + 0xf8]
cmp r8, 0xf
jbe 0x14010dca8
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400034c0
movdqu xmmword [rbp + 0xf0], xmm6
mov byte [rbp + 0xe0], 0
mov r8, qword [rbp + 0x118]
cmp r8, 0xf
jbe 0x14010dcd7
mov rdx, qword [rbp + 0x100]
lea rcx, [rbp + 0x100]
call fcn.1400034c0
movdqu xmmword [rbp + 0x110], xmm6
mov byte [rbp + 0x100], 0
mov r8, qword [rbp + 0x138]
cmp r8, 0xf
jbe 0x14010dd06
mov rdx, qword [rbp + 0x120]
lea rcx, [rbp + 0x120]
call fcn.1400034c0
movdqu xmmword [rbp + 0x130], xmm6
mov byte [rbp + 0x120], 0
mov r8, qword [rsp + 0x58]
cmp r8, 0xf
jbe 0x14010dd2f
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400034c0
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov r8, qword [rbp + 0x38]
cmp r8, 0xf
jbe 0x14010dd51
mov rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x20]
call fcn.1400034c0
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], 0
mov r8, qword [rbp + 0x58]
cmp r8, 0xf
jbe 0x14010dd71
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.1400034c0
movdqu xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x40], 0
mov r8, qword [rbp - 0x48]
cmp r8, 0xf
jbe 0x14010dd91
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.1400034c0
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov r8, qword [rbp - 0x28]
cmp r8, 0xf
jbe 0x14010ddb1
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.1400034c0
movdqu xmmword [rbp - 0x30], xmm6
mov byte [rbp - 0x40], 0
mov r8, qword [rbp - 8]
cmp r8, 0xf
jbe 0x14010ddd1
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.1400034c0
movdqu xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], 0
mov r8, qword [rbp + 0x18]
cmp r8, 0xf
jbe 0x14010ddf1
mov rdx, qword [rbp]
lea rcx, [rbp]
call fcn.1400034c0
movdqu xmmword [rbp + 0x10], xmm6
mov byte [rbp], 0
lea rax, [rbp + 0x80]
mov qword [rbp + 0x400], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], rsi
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.application_json
lea rcx, [rbp + 0x80]
call fcn.1400037b0
nop
lea rax, [rbp + 0x2c0]
mov qword [rbp + 0x408], rax
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x2c0]
call fcn.140004a20
mov rcx, rax
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x400], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa0], 0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 0xa
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.d9G1ZFLEHa]
movsd qword [rbp - 0x80], xmm0
movzx eax, word [0x140338068]
mov word [rbp - 0x78], ax
mov byte [rbp - 0x76], 0
lea rax, [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0xa0]
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0xc0]
lea rcx, [0x140390ef0]
call fcn.140092c70
mov r8, qword [rbp + 0xd8]
cmp r8, 0xf
jbe 0x14010df0e
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xc0]
call fcn.1400034c0
mov byte [r13], 1
mov byte [0x14039185c], 0
mov r8, qword [rbp + 0x218]
cmp r8, 0xf
jbe 0x14010df3b
mov rdx, qword [rbp + 0x200]
lea rcx, [rbp + 0x200]
call fcn.1400034c0
nop
mov r8, qword [rbp + 0x198]
cmp r8, 0xf
jbe 0x14010df5c
mov rdx, qword [rbp + 0x180]
lea rcx, [rbp + 0x180]
call fcn.1400034c0
nop
mov r8, qword [rsp + 0x78]
cmp r8, 0xf
jbe 0x14010df77
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.1400034c0
nop
mov r8, qword [rbp + 0x78]
cmp r8, 0xf
jbe 0x14010df8f
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp + 0x60]
call fcn.1400034c0
nop
mov r8, qword [rbp + 0x1b8]
cmp r8, 0xf
jbe 0x14010dfb0
mov rdx, qword [rbp + 0x1a0]
lea rcx, [rbp + 0x1a0]
call fcn.1400034c0
nop
mov r8, qword [rbp + 0x1d8]
cmp r8, 0xf
jbe 0x14010dfd1
mov rdx, qword [rbp + 0x1c0]
lea rcx, [rbp + 0x1c0]
call fcn.1400034c0
nop
mov r8, qword [rbp + 0x178]
cmp r8, 0xf
jbe 0x14010dff2
mov rdx, qword [rbp + 0x160]
lea rcx, [rbp + 0x160]
call fcn.1400034c0
nop
mov r8, qword [rbp + 0x258]
cmp r8, 0xf
jbe 0x14010e6cd
mov rdx, qword [rbp + 0x240]
lea rcx, [rbp + 0x240]
call fcn.1400034c0
jmp 0x14010e6cd
xor bl, bl
test r8d, r8d
jne 0x14010f703
jmp 0x14010d7b1
cmp r14, r12
je 0x14010e052
mov rdx, r12
cmp qword [0x140391140], 0xf
cmova rdx, qword [0x140391128]
mov r8, qword [0x140391138]
mov rcx, r14
call fcn.14000a980
lea rcx, [rbp + 0xe0]
call fcn.1401108a0
nop
lea rcx, [rbp + 0x180]
call fcn.1401104b0
nop
lea rcx, [rbp + 0x1a0]
call fcn.140110760
nop
lea rcx, [rbp + 0x1c0]
call fcn.140110610
nop
lea rdx, [rbp + 0x310]
lea rcx, [rbp]
call fcn.140004a20
nop
lea rcx, [rbp + 0x160]
call fcn.1401111e0
nop
mov rax, r15
mov rcx, qword [rbp + 0x10]
sub rax, rcx
cmp rax, 0x9f
jb 0x14010f722
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x9f
lea r9, str._embeds_:___title_:__Inicio_de_sesion_fallido____description_:__Detalles_del_intento_de_inicio____color_:_15158332___fields_:___name_:__Usuario____value_:__
lea r8, [rbp]
movzx edx, byte [rbp + 0x3f8]
lea rcx, [rbp + 0xc0]
call fcn.14000e1e0
nop
mov r8d, Ordinal_50
lea rdx, str.____inline_:_true___name_:__Status____value_:__
lea rcx, [rbp + 0xc0]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, r14
cmp qword [0x1403921d8], 0xf
cmova rdx, qword [0x1403921c0]
mov r8, qword [0x1403921d0]
lea rcx, [rsp + 0x60]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, gethostname
lea rdx, str.____inline_:_true___name_:__Processor____value_:__
lea rcx, [rbp - 0x80]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rdx, qword [rbp + 0xe0]
mov r8, qword [rbp + 0xf0]
lea rcx, [rbp + 0x60]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, gethostname
lea rdx, str.____inline_:_false___name_:__Processor_ID____value_:__
lea rcx, [rbp + 0x20]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x280]
call fcn.14000b7e0
nop
mov r8d, reloc.WS2_32.dll_gethostname
lea rdx, str.____inline_:_false___name_:__Graphics_Card____value_:__
mov rcx, rax
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x1a0]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x1e0]
call fcn.14000b7e0
nop
mov r8d, 0x3e
lea rdx, str.____inline_:_false___name_:__Disk_Serial_Number____value_:__
mov rcx, rax
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x1c0]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x200]
call fcn.14000b7e0
nop
mov r8d, Ordinal_50
lea rdx, str.____inline_:_false___name_:__SID____value_:__
mov rcx, rax
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x160]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x2c0]
call fcn.14000b7e0
nop
mov r8d, 6
lea rdx, [0x140337dd4]
mov rcx, rax
call fcn.14000aaf0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rbp + 0x2c0]
call fcn.140003460
nop
mov r8, qword [rbp - 8]
cmp r8, 0xf
jbe 0x14010e3f2
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.1400034c0
movdqu xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], 0
lea rcx, [rbp + 0x200]
call fcn.140003460
nop
mov r8, qword [rbp - 0x28]
cmp r8, 0xf
jbe 0x14010e41f
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.1400034c0
movdqu xmmword [rbp - 0x30], xmm6
mov byte [rbp - 0x40], 0
lea rcx, [rbp + 0x1e0]
call fcn.140003460
nop
mov r8, qword [rbp - 0x48]
cmp r8, 0xf
jbe 0x14010e44c
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x60]
call fcn.1400034c0
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
lea rcx, [rbp + 0x280]
call fcn.140003460
nop
mov r8, qword [rbp + 0x58]
cmp r8, 0xf
jbe 0x14010e479
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.1400034c0
movdqu xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x40], 0
mov r8, qword [rbp + 0x38]
cmp r8, 0xf
jbe 0x14010e499
mov rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x20]
call fcn.1400034c0
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], 0
mov r8, qword [rbp + 0x78]
cmp r8, 0xf
jbe 0x14010e4b9
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp + 0x60]
call fcn.1400034c0
movdqu xmmword [rbp + 0x70], xmm6
mov byte [rbp + 0x60], 0
mov r8, qword [rbp - 0x68]
cmp r8, 0xf
jbe 0x14010e4d9
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.1400034c0
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov r8, qword [rsp + 0x78]
cmp r8, 0xf
jbe 0x14010e4fc
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.1400034c0
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
lea rcx, [rbp + 0xc0]
call fcn.140003460
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x400], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], rsi
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.application_json
lea rcx, [rbp + 0xa0]
call fcn.1400037b0
nop
lea rax, [rbp + 0x220]
mov qword [rbp + 0x408], rax
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x220]
call fcn.140004a20
mov rbx, rax
lea rax, [rbp + 0x80]
mov qword [rbp + 0x300], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], rsi
xor r8d, r8d
lea rdx, [0x140136d01]
lea rcx, [rbp + 0x80]
call fcn.1400037b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], rsi
mov qword [rbp + 0x138], rsi
mov r8d, 0xa
lea rdx, str.d9G1ZFLEHa
lea rcx, [rbp + 0x120]
call fcn.1400037b0
nop
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x80]
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x260]
lea rcx, [0x140390ef0]
call fcn.140092c70
lea rcx, [rbp + 0x260]
call fcn.140003460
lea rcx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rcx, qword [rbp + 0x140]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movdqa xmm0, xmmword [0x140339880]
movups xmmword [0x14038d958], xmm0
mov byte [0x14039185c], 1
mov dword [0x14038d98c], 0
mov r8, qword [rbp + 0x118]
cmp r8, 0xf
jbe 0x14010e682
mov rdx, qword [rbp + 0x100]
lea rcx, [rbp + 0x100]
call fcn.1400034c0
nop
lea rcx, [rbp + 0x160]
call fcn.140003460
nop
lea rcx, [rbp]
call fcn.140003460
nop
lea rcx, [rbp + 0x1c0]
call fcn.140003460
nop
lea rcx, [rbp + 0x1a0]
call fcn.140003460
nop
lea rcx, [rbp + 0x180]
call fcn.140003460
nop
lea rcx, [rbp + 0xe0]
call fcn.140003460
nop
lea rcx, [rbp + 0x330]
call fcn.140003460
lea rcx, [rbp + 0x310]
call fcn.140003460
jmp 0x14010e6ec
mov byte [r13], 0
mov byte [0x140391850], 1
mov byte [0x14039186d], 1
mov rbx, qword [0x140390b10]
jmp 0x14010e710
cmp byte [0x140391850], 0
je 0x14010f542
mov rax, qword [rbx + 0x4038]
mov byte [rax + 0xc0], 1
mov r10, qword [rbx + 0x4038]
movsxd rcx, dword [r10 + 0x100]
mov rax, qword [r10 + 0x108]
mov r9d, dword [rax + rcx*4 - 4]
not r9d
mov ebx, r9d
lea rdx, [0x140338171]
mov r8b, 0x4c
lea r11, [0x14013fa60]
nop
cmp r8b, 0x23
jne 0x14010e763
cmp byte [rdx], r8b
jne 0x14010e763
cmp byte [rdx + 1], r8b
cmove ebx, r9d
movzx ecx, bl
movzx eax, r8b
xor rcx, rax
shr ebx, 8
xor ebx, dword [r11 + rcx*4]
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
jne 0x14010e750
not ebx
mov rax, qword [r10]
cmp dword [rax + 0x4084], ebx
jne 0x14010e7a0
lea r8, str.LoginForm
mov edx, ntohl
mov ecx, ebx
call fcn.1400b8570
mov dword [rsp + 0x20], 8
mov r9d, 1
lea r8, [rbp + 0x3f8]
mov edx, ebx
lea rcx, str.LoginForm
call fcn.1400c93c0
mov rbx, qword [0x140390b10]
mov qword [rsp + 0x30], rsi
lea rdi, str.Login
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm8
movss xmm2, dword [rbx + 0x3d60]
lea rdx, [rbp + 0x3f8]
mov rcx, qword [rbx + 0x3d58]
call fcn.1400e9a60
movss xmm0, dword [rbp + 0x3f8]
addss xmm0, dword [0x1403391bc]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm7, xmm1
mulss xmm7, dword [0x140339188]
mov rax, qword [rbx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4038]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
mov rcx, rdi
call fcn.140107530
mov rcx, qword [0x140390b10]
mov r8, qword [rcx + 0x4038]
cmp byte [r8 + 0xc3], 0
jne 0x14010e8a6
mov edx, dword [r8 + 0x1c4]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1b8], 0
je 0x14010e89a
neg edx
sbb ecx, ecx
add ecx, 6
call fcn.140100c10
mov rcx, qword [0x140390b10]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
cmp byte [rax + 0xc3], 0
jne 0x14010e8e6
mov qword [rbp + 0x3f8], 0
movaps xmm1, xmm8
lea rcx, [rbp + 0x3f8]
call fcn.1400c1a70
mov rcx, qword [0x140390b10]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, dword [0x14033925c]
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
lea rdi, [0x140391e48]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
mov rax, qword [0x140391e60]
lea r9, [rax + 1]
mov r8, rdi
cmp rax, 0xf
cmova r8, qword [0x140391e48]
mov qword [rbp + 0x3f8], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
lea rax, [0x1400f1230]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x40000
lea rax, [rbp + 0x3f8]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, str.Username
call fcn.1400f7e70
mov rcx, qword [0x140390b10]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
cmp byte [rax + 0xc3], 0
jne 0x14010e9d9
mov qword [rbp + 0x400], 0
movaps xmm1, xmm8
lea rcx, [rbp + 0x400]
call fcn.1400c1a70
mov rcx, qword [0x140390b10]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, dword [0x14033925c]
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
lea rbx, [0x140392110]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
mov rax, qword [0x140392128]
lea r9, [rax + 1]
mov r8, rbx
cmp rax, 0xf
cmova r8, qword [0x140392110]
mov qword [rbp + 0x3f8], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
lea rax, [0x1400f1230]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x48000
lea rax, [rbp + 0x3f8]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, str.Password
call fcn.1400f7e70
mov rcx, qword [0x140390b10]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
cmp byte [rax + 0xc3], 0
jne 0x14010eacc
mov qword [rbp + 0x400], 0
movaps xmm1, xmm8
lea rcx, [rbp + 0x400]
call fcn.1400c1a70
mov rcx, qword [0x140390b10]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, dword [0x14033925c]
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
mov dword [rbp + 0x3f8], 0x43a50000
mov dword [rbp + 0x3fc], 0x41f00000
lea rdx, [rbp + 0x3f8]
lea rcx, str.Login
call fcn.140103480
test al, al
je 0x14010f536
lea rcx, [0x140390ef0]
call fcn.14008b1c0
cmp byte [0x140391120], 0
jne 0x14010eb83
mov r8d, gethostname
lea rdx, str.Failed_to_initialize_auth._Please_check_your_connection.
mov rcx, r14
call fcn.14000a980
movdqa xmm0, xmmword [0x140339880]
movups xmmword [0x14038d958], xmm0
mov byte [0x14039185c], 1
mov dword [0x14038d98c], 0
jmp 0x14010f536
lea rax, [rbp + 0x2c0]
mov qword [rbp + 0x3f8], rax
mov rdx, rbx
lea rcx, [rbp + 0x2c0]
call fcn.140004a20
mov rbx, rax
mov rdx, rdi
lea rcx, [rbp + 0xc0]
call fcn.140004a20
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x140390ef0]
call fcn.14008d680
cmp byte [0x140391120], 0
jne 0x14010f191
cmp r14, r12
je 0x14010ebf9
cmp qword [0x140391140], 0xf
cmova r12, qword [0x140391128]
mov r8, qword [0x140391138]
mov rdx, r12
mov rcx, r14
call fcn.14000a980
lea rcx, [rbp + 0x1e0]
call fcn.1401108a0
nop
lea rcx, [rbp + 0x200]
call fcn.1401104b0
nop
lea rcx, [rbp + 0x180]
call fcn.140110760
nop
lea rcx, [rbp + 0x1a0]
call fcn.140110610
nop
mov rdx, rdi
lea rcx, [rbp]
call fcn.140004a20
nop
lea rcx, [rbp + 0x1c0]
call fcn.1401111e0
nop
mov rcx, qword [rbp + 0x10]
sub r15, rcx
cmp r15, 0x9f
jb 0x14010f6f7
lea rax, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rax, qword [rbp]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x9f
lea r9, str._embeds_:___title_:__Inicio_de_sesion_fallido____description_:__Detalles_del_intento_de_inicio____color_:_15158332___fields_:___name_:__Usuario____value_:__
lea r8, [rbp]
movzx edx, byte [rbp + 0x3f8]
lea rcx, [rbp + 0x160]
call fcn.14000e1e0
nop
mov r8d, Ordinal_50
lea rdx, str.____inline_:_true___name_:__Status____value_:__
lea rcx, [rbp + 0x160]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, r14
cmp qword [0x1403921d8], 0xf
cmova rdx, qword [0x1403921c0]
mov r8, qword [0x1403921d0]
lea rcx, [rbp + 0xe0]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, gethostname
lea rdx, str.____inline_:_true___name_:__Processor____value_:__
lea rcx, [rbp + 0x100]
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x2a0]
call fcn.14000b7e0
nop
mov r8d, gethostname
lea rdx, str.____inline_:_false___name_:__Processor_ID____value_:__
mov rcx, rax
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x200]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x260]
call fcn.14000b7e0
nop
mov r8d, reloc.WS2_32.dll_gethostname
lea rdx, str.____inline_:_false___name_:__Graphics_Card____value_:__
mov rcx, rax
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x220]
call fcn.14000b7e0
nop
mov r8d, 0x3e
lea rdx, str.____inline_:_false___name_:__Disk_Serial_Number____value_:__
mov rcx, rax
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x1a0]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x280]
call fcn.14000b7e0
nop
mov r8d, Ordinal_50
lea rdx, str.____inline_:_false___name_:__SID____value_:__
mov rcx, rax
call fcn.14000aaf0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x1c0]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x2c0]
call fcn.14000b7e0
nop
mov r8d, 6
lea rdx, [0x140337dd4]
mov rcx, rax
call fcn.14000aaf0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rbp + 0x2c0]
call fcn.140003460
nop
mov r8, qword [rsp + 0x78]
cmp r8, 0xf
jbe 0x14010efa4
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.1400034c0
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
lea rcx, [rbp + 0x280]
call fcn.140003460
nop
mov r8, qword [rbp - 0x68]
cmp r8, 0xf
jbe 0x14010efd3
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.1400034c0
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
lea rcx, [rbp + 0x220]
call fcn.140003460
nop
lea rcx, [rbp + 0xa0]
call fcn.140003460
nop
lea rcx, [rbp + 0x260]
call fcn.140003460
nop
lea rcx, [rbp + 0x80]
call fcn.140003460
nop
lea rcx, [rbp + 0x2a0]
call fcn.140003460
nop
lea rcx, [rbp + 0x120]
call fcn.140003460
nop
lea rcx, [rbp + 0x100]
call fcn.140003460
nop
lea rcx, [rbp + 0xe0]
call fcn.140003460
nop
lea rcx, [rbp + 0x160]
call fcn.140003460
lea rax, [rbp + 0x240]
mov qword [rbp + 0x3f8], rax
lea rdx, str.application_json
lea rcx, [rbp + 0x240]
call fcn.140003420
mov rsi, rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x400], rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x60]
call fcn.140004a20
mov rdi, rax
lea rax, [rbp - 0x20]
mov qword [rbp + 0x408], rax
lea rdx, [0x140136d01]
lea rcx, [rbp - 0x20]
call fcn.140003420
mov rbx, rax
lea rdx, str.d9G1ZFLEHa
lea rcx, [rbp - 0x40]
call fcn.140003420
nop
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov r8, rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140390ef0]
call fcn.140092c70
lea rcx, [rbp - 0x60]
call fcn.140003460
lea rcx, [rbp + 0x140]
call fcn.140004980
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movss xmm1, dword [0x1403391c4]
movss dword [rsp + 0x20], xmm1
movaps xmm3, xmm9
movaps xmm2, xmm9
lea rcx, [rsp + 0x40]
call fcn.14001ae10
movups xmm1, xmmword [rax]
movups xmmword [0x14038d958], xmm1
mov byte [0x14039185c], 1
mov dword [0x14038d98c], 0
lea rcx, [rbp + 0xc0]
call fcn.140003460
nop
lea rcx, [rbp + 0x1c0]
call fcn.140003460
nop
lea rcx, [rbp]
call fcn.140003460
nop
lea rcx, [rbp + 0x1a0]
call fcn.140003460
nop
lea rcx, [rbp + 0x180]
call fcn.140003460
nop
lea rcx, [rbp + 0x200]
call fcn.140003460
nop
lea rcx, [rbp + 0x1e0]
jmp 0x14010f52f
mov rdx, r12
mov rcx, r14
call fcn.140009900
lea rcx, [rbp + 0x80]
call fcn.1401108a0
nop
lea rcx, [rbp + 0xa0]
call fcn.1401104b0
nop
lea rcx, [rbp + 0x200]
call fcn.140110760
nop
lea rcx, [rbp + 0x180]
call fcn.140110610
nop
lea rdx, [0x140390fd0]
lea rcx, [rbp + 0x1a0]
call fcn.140004a20
nop
lea rdx, [0x140390fb0]
lea rcx, [rbp + 0x1c0]
call fcn.140004a20
nop
lea rcx, [rbp + 0x160]
call fcn.1401111e0
nop
lea r8, [rbp + 0x1c0]
lea rdx, str._embeds_:___title_:__Inicio_de_sesion_exitoso____description_:__Detalles_del_usuario____color_:_3066993___fields_:___name_:__Usuario____value_:__
lea rcx, [rbp - 0x20]
call fcn.14000b560
nop
lea r8, str.____inline_:_true___name_:__Status____value_:__
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14000b770
nop
mov r8, r14
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_true___name_:__IP____value_:__
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000b770
nop
lea r8, [rbp + 0x1a0]
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__Processor____value_:__
mov rdx, rax
lea rcx, [rbp]
call fcn.14000b770
nop
lea r8, [rbp + 0x80]
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__Processor_ID____value_:__
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.14000b770
nop
lea r8, [rbp + 0xa0]
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__Graphics_Card____value_:__
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.14000b770
nop
lea r8, [rbp + 0x200]
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__Disk_Serial_Number____value_:__
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14000b770
nop
lea r8, [rbp + 0x180]
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.14000b7e0
nop
lea r8, str.____inline_:_false___name_:__SID____value_:__
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.14000b770
nop
lea r8, [rbp + 0x160]
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.14000b7e0
nop
lea r8, [0x140337dd4]
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.14000b770
nop
lea rcx, [rbp + 0x2c0]
call fcn.140003460
nop
lea rcx, [rbp + 0x120]
call fcn.140003460
nop
lea rcx, [rbp + 0x100]
call fcn.140003460
nop
lea rcx, [rbp + 0xe0]
call fcn.140003460
nop
lea rcx, [rbp + 0x1e0]
call fcn.140003460
nop
lea rcx, [rbp + 0x280]
call fcn.140003460
nop
lea rcx, [rbp + 0x220]
call fcn.140003460
nop
lea rcx, [rbp + 0x260]
call fcn.140003460
nop
lea rcx, [rbp + 0x2a0]
call fcn.140003460
nop
lea rcx, [rbp]
call fcn.140003460
nop
lea rcx, [rbp + 0x240]
call fcn.140003460
nop
lea rcx, [rsp + 0x60]
call fcn.140003460
nop
lea rcx, [rbp - 0x80]
call fcn.140003460
nop
lea rcx, [rbp + 0x60]
call fcn.140003460
nop
lea rcx, [rbp - 0x20]
call fcn.140003460
lea rax, [rbp - 0x40]
mov qword [rbp + 0x3f8], rax
lea rdx, str.application_json
lea rcx, [rbp - 0x40]
call fcn.140003420
mov rsi, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x400], rax
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.140004a20
mov rdi, rax
lea rax, [rbp + 0x40]
mov qword [rbp + 0x408], rax
lea rdx, [0x140136d01]
lea rcx, [rbp + 0x40]
call fcn.140003420
mov rbx, rax
lea rdx, str.d9G1ZFLEHa
lea rcx, [rbp + 0x20]
call fcn.140003420
nop
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov r8, rax
lea rdx, [rbp + 0x350]
lea rcx, [0x140390ef0]
call fcn.140092c70
lea rcx, [rbp + 0x350]
call fcn.140003460
lea rcx, [rbp + 0x140]
call fcn.140110030
mov byte [r13], 1
mov byte [0x14039185c], 0
lea rcx, [rbp + 0xc0]
call fcn.140003460
nop
lea rcx, [rbp + 0x160]
call fcn.140003460
nop
lea rcx, [rbp + 0x1c0]
call fcn.140003460
nop
lea rcx, [rbp + 0x1a0]
call fcn.140003460
nop
lea rcx, [rbp + 0x180]
call fcn.140003460
nop
lea rcx, [rbp + 0x200]
call fcn.140003460
nop
lea rcx, [rbp + 0xa0]
call fcn.140003460
nop
lea rcx, [rbp + 0x80]
call fcn.140003460
xor esi, esi
call fcn.1400c90f0
mov rbx, qword [0x140390b10]
cmp byte [0x14039185c], 0
je 0x14010f684
movss xmm0, dword [0x14038d98c]
addss xmm0, dword [rbx + 0x18]
movss dword [0x14038d98c], xmm0
comiss xmm0, dword [0x14033925c]
jae 0x14010f67d
mov rax, qword [rbx + 0x4038]
movss xmm7, dword [rax + 0x30]
movss xmm6, dword [rax + 0x34]
mov rax, r14
cmp qword [0x1403921d8], 0xf
cmova rax, qword [0x1403921c0]
movss xmm0, dword [rbx + 0x3d60]
test rax, rax
je 0x14010f5ee
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movaps xmm2, xmm0
lea rdx, [rbp + 0x3f8]
mov rcx, qword [rbx + 0x3d58]
call fcn.1400e9a60
movss xmm0, dword [rbp + 0x3f8]
addss xmm0, dword [0x1403391bc]
cvttss2si eax, xmm0
movd xmm9, eax
cvtdq2ps xmm9, xmm9
movss xmm0, dword [rbp + 0x3fc]
subss xmm6, xmm0
subss xmm6, dword [0x140339280]
mov rax, qword [rbx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
subss xmm7, xmm9
addss xmm0, xmm7
subss xmm0, dword [0x140339280]
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
cmp qword [0x1403921d8], 0xf
cmova r14, qword [0x1403921c0]
mov r8, r14
lea rdx, [0x1403322ec]
lea rcx, [0x14038d958]
call fcn.140105990
jmp 0x14010f684
mov byte [0x14039185c], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14010f6c8
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010f6c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14010f6c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096518
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400033f0
nop
call fcn.140003350
nop
lea r8, [rbp + 0x2e0]
lea rdx, [rsp + 0x40]
lea rcx, str.exists
call fcn.1400281c0
nop
call fcn.1400033f0
nop
call fcn.1400033f0
int3