Function at 0x1400104f0
Capabilities:
Get hostname
Get session user name
Hash data using sha1
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xad0]
sub rsp, 0xbd0
mov rax, qword [0x14006c020]
xor rax, rsp
mov qword [rbp + 0xac0], rax
call fcn.1400207d0
lea rcx, [rbp + 0x288]
call fcn.14001f910
nop
xor r15d, r15d
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], r15
lea rsi, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0x10
cmovae rsi, qword [rbp + 0x288]
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rbp + 0x298]
cmp rdi, 0x10
jae 0x140010597
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
jmp 0x14001060d
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400105e1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400119ed
mov rcx, rax
call fcn.140026354
mov rcx, rax
test rax, rax
je 0x140011a35
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400105f0
test rcx, rcx
je 0x1400105ed
call fcn.140026354
jmp 0x1400105f0
mov rax, r15
mov qword [rbp + 0x150], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140028200
mov qword [rbp + 0x168], rbx
mov qword [rbp + 0x160], rdi
mov r8d, 8
lea rdx, str._account
lea rcx, [rbp + 0x150]
call fcn.140004aa0
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x60]
call fcn.140003430
mov rcx, rax
call fcn.140002070
mov qword [rbp + 0x170], r15
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
xor r8d, r8d
lea rdx, [0x1400603cb]
lea rcx, [rbp + 0x170]
call fcn.140004940
nop
lea rcx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rcx, qword [rbp + 0x150]
lea rdx, [0x140060820]
call fcn.1400302b8
mov r12, rax
xor r13b, r13b
lea r14, str.error
lea rsi, vtable.std::ios_base.0
test r12, r12
je 0x140010ba8
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, r12
call fcn.14003076c
mov rcx, r12
call fcn.14002fe08
movsxd rbx, eax
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.14003076c
mov rdi, rbx
mov rcx, rbx
call fcn.1400321ec
mov rbx, rax
test rax, rax
je 0x14001079d
mov r9, r12
mov r8, rdi
mov edx, 1
mov rcx, rax
call fcn.140032124
mov rcx, r12
call fcn.1400303e4
mov byte [rdi + rbx], 0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x140010730
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.140004940
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x140010787
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010782
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a23
call fcn.1400260b0
movups xmm0, xmmword [rbp + 0x30]
movups xmmword [rbp + 0x170], xmm0
movups xmm1, xmmword [rbp + 0x40]
movups xmmword [rbp + 0x180], xmm1
mov rsi, qword [rbp + 0x180]
test rsi, rsi
je 0x140010978
lea rdi, [rbp + 0x170]
mov r14, qword [rbp + 0x170]
mov r15, qword [rbp + 0x188]
cmp r15, 0x10
cmovae rdi, r14
test rsi, rsi
je 0x140010819
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x4d0]
call fcn.1400288b0
mov byte [rbp + 0x4da], 1
lea rcx, [rsi + rdi]
mov rbx, rdi
cmp rdi, rcx
jae 0x140010819
nop word [rax + rax]
movzx eax, byte [rbx]
cmp byte [rbp + rax + 0x4d0], 0
jne 0x140010ba0
inc rbx
cmp rbx, rcx
jb 0x140010800
mov rbx, 0xffffffffffffffff
xor eax, eax
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
movsxd r8, ebx
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp + 0x170]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rbp + 0x80]
call fcn.140004940
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x1400108a1
inc rdx
mov rcx, qword [0x1401d6c38]
cmp rdx, 0x1000
jb 0x14001089c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011a23
mov rcx, r8
call fcn.1400260b0
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [0x1401d6c38], xmm0
movups xmm1, xmmword [rbp + 0x90]
movups xmmword [0x1401d6c48], xmm1
lea eax, [rbx + 1]
movsxd rcx, eax
xor r15d, r15d
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov rax, qword [rbp + 0x180]
cmp rax, rcx
jb 0x1400119f3
sub rax, rcx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
cmovae rdx, qword [rbp + 0x170]
add rdx, rcx
lea rcx, [rbp + 0x60]
call fcn.140004940
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x14001095b
inc rdx
mov rcx, qword [0x1401d6c58]
cmp rdx, 0x1000
jb 0x140010956
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140011a23
mov rcx, r8
call fcn.1400260b0
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [0x1401d6c58], xmm0
movups xmm1, xmmword [rbp + 0x70]
movups xmmword [0x1401d6c68], xmm1
lea r14, str.error
lea rsi, vtable.std::ios_base.0
mov qword [rbp + 0x248], r15
mov qword [rbp + 0x258], r15
mov qword [rbp + 0x260], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x248], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x900], xmm0
movups xmmword [rbp + 0x910], xmm0
movups xmmword [rbp + 0x920], xmm0
movups xmmword [rbp + 0x930], xmm0
movups xmmword [rbp + 0x940], xmm0
movups xmmword [rbp + 0x950], xmm0
mov dword [rbp + 0x960], eax
mov dword [rbp + 0x1a0], 0x64
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0x900]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov dword [rbp + 0x1f0], 0x101
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x9b0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea rax, [rbp + 0x9b0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140010a20
lea rdx, [rbp + 0x9b0]
lea rcx, [rbp + 0x248]
call fcn.140004aa0
mov r8d, 1
lea rdx, [0x140060884]
lea rcx, [rbp + 0x248]
call fcn.140004aa0
lea rax, [rbp + 0x900]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140010a64
lea rdx, [rbp + 0x900]
lea rcx, [rbp + 0x248]
call fcn.140004aa0
mov qword [rbp + 0x1c8], r15
mov qword [rbp + 0x1d8], r15
mov qword [rbp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c8], 0
mov dword [rbp + 0x1b0], 0x67452301
mov dword [rbp + 0x1b4], 0xefcdab89
mov dword [rbp + 0x1b8], 0x98badcfe
mov dword [rbp + 0x1bc], 0x10325476
mov dword [rbp + 0x1c0], 0xc3d2e1f0
xor r8d, r8d
lea rdx, [0x1400603cb]
lea rcx, [rbp + 0x1c8]
call fcn.140004940
mov qword [rbp + 0x1e8], r15
xor edx, edx
mov r8d, 0xf0
lea rcx, [rbp + 0x2b0]
call fcn.1400288b0
lea rdx, [rbp + 0x248]
lea rcx, [rbp + 0x2b0]
call fcn.1400121b0
nop
nop dword [rax + rax]
mov r8d, 0x40
sub r8, qword [rbp + 0x1d8]
lea rdx, [rbp + 0x970]
lea rcx, [rbp + 0x2b0]
call fcn.140012340
mov rdi, qword [rbp + 0x2b8]
mov rcx, qword [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1e0]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x140010c1b
lea rax, [rcx + rdi]
mov qword [rbp + 0x1d8], rax
lea rbx, [rbp + 0x1c8]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x1c8]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x970]
mov rcx, rbx
call fcn.140028200
mov byte [rdi + rbx], 0
jmp 0x140010c36
sub rbx, rdi
jmp 0x140010820
mov byte [0x1401d9fa4], 1
lea rdx, str.account_login__lemoncheats.net_
lea rcx, [0x1401d8230]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
lea rdx, str.enter_username_:
lea rcx, [0x1401d8230]
call fcn.140005ff0
lea rdx, [0x1401d6c38]
lea rcx, [0x1401d84e0]
call fcn.140015ff0
lea rdx, str.enter_password_:
lea rcx, [0x1401d8230]
call fcn.140005ff0
lea rdx, [0x1401d6c58]
lea rcx, [0x1401d84e0]
call fcn.140015ff0
jmp 0x14001097f
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x970]
mov rdx, rdi
lea rcx, [rbp + 0x1c8]
call fcn.1400064e0
cmp qword [rbp + 0x1d8], 0x40
jne 0x140010c93
lea rdx, [rbp + 0x890]
lea rcx, [rbp + 0x1c8]
call fcn.1400097d0
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0x890]
lea rcx, [rbp + 0x1b0]
call fcn.140008610
lea rax, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae rax, qword [rbp + 0x1c8]
mov qword [rbp + 0x1d8], r15
mov byte [rax], 0
jmp 0x140010b20
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx + 0x2ac], edx
lea rcx, [rbp + 0x2c0]
call fcn.140002b60
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x2ac], edx
mov qword [rbp + 0x340], rsi
lea rcx, [rbp + 0x340]
call fcn.140022f9c
nop
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x1b0]
call fcn.140009a50
nop
lea rdi, [rbp + 0x218]
mov r8, qword [rbp + 0x218]
cmp qword [rbp + 0x230], 0x10
cmovae rdi, r8
lea rcx, [rbp + 0x218]
cmovae rcx, r8
mov rsi, qword [rbp + 0x228]
add rsi, rcx
lea rbx, [rbp + 0x218]
cmp qword [rbp + 0x230], 0x10
cmovae rbx, r8
cmp rbx, rsi
je 0x140010d85
sub rdi, rbx
movsx ecx, byte [rbx]
call fcn.1400301d0
mov byte [rdi + rbx], al
inc rbx
cmp rbx, rsi
jne 0x140010d72
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.lemoncheats.net
lea rcx, [rbp - 0x70]
call fcn.140004940
nop
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], 0
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10]
mov r8d, 0x50
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x5d0]
call fcn.14000cbf0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140010e38
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010e32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400119f9
call fcn.1400260b0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140010e73
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010e6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400119ff
call fcn.1400260b0
lea rax, vtable.httplib::Client.0
mov qword [rbp + 0x5d0], rax
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140010ebc
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010eb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a05
call fcn.1400260b0
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], r15
mov ecx, 0x60
call fcn.140026354
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x190], rax
lea r9, [0x1401d6c38]
lea r8, str.username
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x190]
call fcn.140018ca0
lea r9, [0x1400608a4]
lea r8, str.type
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x190]
call fcn.140018e20
lea r9, [0x1401d6c58]
lea r8, str.password
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x190]
call fcn.140018ca0
lea r9, [rbp + 0x218]
lea r8, str.hwid
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x190]
call fcn.140018ca0
lea r9, str.bannerlord
lea r8, str.game
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x190]
call fcn.140018e20
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
mov ecx, 0x60
call fcn.140026354
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x268]
call fcn.14000c050
nop
mov qword [rbp + 0x148], r15
lea rax, [rbp + 0x110]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x268]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x5d0]
call fcn.14000fa80
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x14001105d
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011058
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a0b
call fcn.1400260b0
mov qword [rbp + 0x278], r15
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
lea rcx, [rbp - 0x80]
call fcn.140011f00
nop
mov rsi, qword [rbp + 0x238]
add rsi, 0x38
mov r8, qword [rsi + 0x10]
mov rdx, rsi
mov r9, qword [rsi + 0x18]
cmp r9, 0x10
jb 0x14001109f
mov rdx, qword [rsi]
cmp r8, 5
jne 0x1400111a0
mov rcx, r15
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r14 + rcx - 1]
jne 0x1400110c9
cmp rcx, 5
jne 0x1400110b0
mov eax, r15d
jmp 0x1400110ce
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400111a0
mov r13b, 1
cmp byte [0x1401d9fa4], al
je 0x1400112ce
lea rcx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rcx, qword [rbp + 0x150]
lea rdx, [0x140060900]
call fcn.1400302b8
mov rbx, rax
lea rcx, [0x1401d6c38]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x1401d6c38]
mov r9, rax
mov r8, qword [0x1401d6c48]
mov edx, 1
call fcn.140031c20
mov r9, rbx
mov edx, 1
mov r8d, edx
lea rcx, [0x140060834]
call fcn.140031c20
lea rcx, [0x1401d6c58]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x1401d6c58]
mov r9, rbx
mov r8, qword [0x1401d6c68]
mov edx, 1
call fcn.140031c20
mov rcx, rbx
call fcn.1400303e4
lea rdx, str.login_ok
lea rcx, [0x1401d8230]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
jmp 0x1400112ce
mov rcx, rsi
cmp r9, 0x10
jb 0x1400111ac
mov rcx, qword [rsi]
cmp r8, 0xa
jne 0x1400111e2
lea rdx, str.hwid_error
call fcn.140028a70
test eax, eax
jne 0x1400111e2
lea rdx, str.hardware_id_failed
lea rcx, [0x1401d8230]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
jmp 0x1400112ce
mov byte [0x1401d9fa4], 1
mov rdi, qword [rbp + 0x160]
lea rbx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rbx, qword [rbp + 0x150]
call fcn.140023728
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], rdi
lea r8, [rbp + 0x50]
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.140007d40
nop
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rcx, qword [rbp - 0x30]
call fcn.1400238bc
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x1400119df
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140011288
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011283
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a11
call fcn.1400260b0
lea rdx, str.login_failed
lea rcx, [0x1401d8230]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x1400112b1
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [0x1401d8230]
call fcn.140006f50
mov rcx, rax
call fcn.140005f60
call fcn.140012430
nop
mov rcx, qword [rbp + 0x240]
test rcx, rcx
je 0x140011315
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140011315
mov rbx, qword [rbp + 0x240]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140011315
mov rcx, qword [rbp + 0x240]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
lea rcx, [rbp + 0x190]
call fcn.140011f00
nop
lea rcx, [rbp + 0x5d0]
call fcn.14000ceb0
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 0x10
jb 0x140011370
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001136b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a17
call fcn.1400260b0
mov qword [rbp + 0x228], r15
mov qword [rbp + 0x230], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x218], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x1400113ca
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400113c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a1d
call fcn.1400260b0
mov qword [rbp + 0x1d8], r15
mov qword [rbp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x260]
cmp rdx, 0x10
jb 0x140011424
inc rdx
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001141f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a23
call fcn.1400260b0
test r13b, r13b
je 0x1400106ad
mov qword [rbp + 0x1f8], r15
mov qword [rbp + 0x208], r15
mov qword [rbp + 0x210], 7
mov word [rbp + 0x1f8], r15w
mov r8d, 0x25
lea rdx, str.TaleWorlds.MountAndBlade.Launcher.exe
lea rcx, [rbp + 0x1f8]
call fcn.1400128a0
nop
lea rdx, str.waiting_for_TaleWorlds.MountAndBlade.Launcher.exe_to_start
lea rcx, [0x1401d8230]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
movabs rsi, 0x7fffffffffffffff
cmp dword [0x1401d9fa0], 0
jne 0x14001155b
movabs rdi, 0x7ffffffffa0a1eff
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp - 0x50]
call fcn.140012590
mov rcx, rax
call fcn.14001f7b0
mov dword [0x1401d9fa0], eax
test eax, eax
jne 0x140011505
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 7
lea r8d, [rax + 0x1a]
lea rdx, str.BannerlordOnlineRunner.exe
lea rcx, [rbp - 0x50]
call fcn.1400128a0
lea rcx, [rbp - 0x50]
call fcn.14001f7b0
mov dword [0x1401d9fa0], eax
call fcn.140023ae0
mov rbx, rax
call fcn.140023ac4
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x14001153f
add rax, 0x5f5e100
mov qword [rsp + 0x58], rax
jmp 0x140011544
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.140016430
cmp dword [0x1401d9fa0], 0
je 0x1400114b0
mov dword [rbp + 0x3a0], 0x130
xor edx, edx
mov r8d, 0x12c
lea rcx, [rbp + 0x3a4]
call fcn.1400288b0
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
jne 0x1400115c3
nop dword [rax]
mov ecx, dword [rbp + 0x3a8]
cmp dword [0x1401d9fa0], ecx
je 0x14001161a
lea rdx, [rbp + 0x3a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
je 0x1400115a0
lea rdx, str.____process
lea rcx, [0x1401d8570]
call fcn.140014440
lea rdx, [rbp + 0x1f8]
cmp qword [rbp + 0x210], 8
cmovae rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x208]
mov rcx, rax
call fcn.140016850
lea rdx, str._not_found.
mov rcx, rax
call fcn.140014440
mov rcx, rax
call fcn.140014770
call fcn.140012430
jmp 0x140011613
lea rdx, str.process_found
lea rcx, [0x1401d8230]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
call fcn.140023ae0
mov rbx, rax
call fcn.140023ac4
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffff88ca6bff
cmp rax, rcx
jge 0x140011679
add rax, 0x77359400
mov qword [rsp + 0x58], rax
jmp 0x14001167e
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.140016430
mov r8d, dword [0x1401d9fa0]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x140011613
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.OpenProcess_success
lea rcx, [rbp + 0xa0]
call fcn.140004940
lea rcx, [rbp + 0xa0]
call fcn.140002070
mov dword [rbp + 0x8d0], 0x378c8278
mov dword [rbp + 0x8d4], 0x4e381110
mov dword [rbp + 0x8d8], 0x1050be1
mov dword [rbp + 0x8dc], 0x5040301
mov dword [rbp + 0x8e0], 0x554d4d16
mov dword [rbp + 0x8e4], 0x62573857
mov dword [rbp + 0x8e8], 0x4a0d9e4d
mov dword [rbp + 0x8ec], 0x4030201
lea rdx, [rbp + 0x8d0]
call fcn.140020000
mov qword [0x1401da460], 0
mov dword [0x1401da468], 0
mov dword [0x1401da46c], 0x5000000
mov ecx, reloc.WS2_32.dll_recv
lea rbx, [0x14006cc60]
mov edi, 0x169c00
lea r14, [0x1401da370]
nop dword [rax]
cmp rcx, 0x10
jne 0x1400117dc
movaps xmm0, xmmword [0x1401da460]
movups xmmword [rbp + 0x8f0], xmm0
lea rcx, [rbp + 0x8f0]
call fcn.140020560
mov eax, reloc.WS2_32.dll_ntohs
nop word [rax + rax]
movzx ecx, byte [rax + r14 + 0xf0]
cmp cl, 0xff
jne 0x1400117cf
mov byte [rax + r14 + 0xf0], 0
sub rax, 1
jns 0x1400117b0
jmp 0x1400117d9
inc cl
mov byte [rax + r14 + 0xf0], cl
mov rcx, r15
movzx eax, byte [rbp + rcx + 0x8f0]
xor byte [rbx], al
inc rbx
inc rcx
sub rdi, 1
jne 0x140011780
mov rcx, rsi
call fcn.14001f500
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
lea rcx, [rsp + 0x60]
test al, al
jne 0x1400119b8
lea r8d, [rdi + 0xd]
lea rdx, str.step_2_failed
call fcn.140004940
lea rcx, [rsp + 0x60]
call fcn.140002070
nop
mov rdx, qword [rbp + 0x210]
cmp rdx, 8
jb 0x14001187b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011876
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a29
call fcn.1400260b0
mov qword [rbp + 0x208], r15
mov qword [rbp + 0x210], 7
mov word [rbp + 0x1f8], r15w
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400118d6
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400118d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a2f
call fcn.1400260b0
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x140011930
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001192b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011a35
call fcn.1400260b0
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x150], 0
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x140011986
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011981
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400119d9
call fcn.1400260b0
xor eax, eax
mov rcx, qword [rbp + 0xac0]
xor rcx, rsp
call fcn.140026090
lea r11, [rsp + 0xbd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.____cheat_injected
call fcn.140004940
lea rcx, [rsp + 0x60]
call fcn.140002070
jmp 0x140011613
call fcn.14002f770
nop
lea r8, [rbp - 0x30]
mov edx, dword [rsp + 0x54]
call fcn.1400085a0
nop
call fcn.140001440
nop
call fcn.140005e00
nop
call fcn.14002f770
nop
call fcn.14002f770
nop
call fcn.14002f770
nop
call fcn.14002f770
nop
call fcn.14002f770
nop
call fcn.14002f770
nop
call fcn.14002f770
nop
call fcn.14002f770
int3
call fcn.14002f770
nop
call fcn.14002f770
nop
call fcn.14002f770
int3