Function at 0x140011160
Capabilities:
Get hostname
Get session user name
Hash data using sha1
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xad0]
sub rsp, 0xbd0
mov rax, qword [0x14006e060]
xor rax, rsp
mov qword [rbp + 0xac0], rax
call fcn.140022a50
lea rcx, [rbp + 0x288]
call fcn.140021b90
nop
xor r15d, r15d
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], r15
lea rsi, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0x10
cmovae rsi, qword [rbp + 0x288]
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rbp + 0x298]
cmp rdi, 0x10
jae 0x140011207
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
jmp 0x14001127d
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140011251
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012634
mov rcx, rax
call fcn.140027ae4
mov rcx, rax
test rax, rax
je 0x14001267c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140011260
test rcx, rcx
je 0x14001125d
call fcn.140027ae4
jmp 0x140011260
mov rax, r15
mov qword [rbp + 0x150], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140029990
mov qword [rbp + 0x168], rbx
mov qword [rbp + 0x160], rdi
mov r8d, 8
lea rdx, str._account
lea rcx, [rbp + 0x150]
call fcn.140004aa0
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x60]
call fcn.140003430
mov rcx, rax
call fcn.140002070
mov qword [rbp + 0x170], r15
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
xor r8d, r8d
lea rdx, [0x1400624ab]
lea rcx, [rbp + 0x170]
call fcn.140004940
nop
lea rcx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rcx, qword [rbp + 0x150]
lea rdx, [0x140062910]
call fcn.140032998
mov r12, rax
xor r13b, r13b
lea r14, [0x140062ac0]
lea rsi, vtable.std::ios_base.0
test r12, r12
je 0x140011818
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, r12
call fcn.140033428
mov rcx, r12
call fcn.1400322d4
movsxd rbx, eax
xor r8d, r8d
xor edx, edx
mov rcx, r12
call fcn.140033428
mov rdi, rbx
mov rcx, rbx
call fcn.140035460
mov rbx, rax
test rax, rax
je 0x14001140d
mov r9, r12
mov r8, rdi
mov edx, 1
mov rcx, rax
call fcn.140035398
mov rcx, r12
call fcn.1400330a0
mov byte [rdi + rbx], 0
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x1400113a0
mov rdx, rbx
lea rcx, [rbp + 0x10]
call fcn.140004940
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400113f7
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400113f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001266a
call fcn.140027840
movups xmm0, xmmword [rbp + 0x10]
movups xmmword [rbp + 0x170], xmm0
movups xmm1, xmmword [rbp + 0x20]
movups xmmword [rbp + 0x180], xmm1
mov rsi, qword [rbp + 0x180]
test rsi, rsi
je 0x1400115e8
lea rdi, [rbp + 0x170]
mov r14, qword [rbp + 0x170]
mov r15, qword [rbp + 0x188]
cmp r15, 0x10
cmovae rdi, r14
test rsi, rsi
je 0x140011489
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x4d0]
call fcn.14002a040
mov byte [rbp + 0x4da], 1
lea rcx, [rdi + rsi]
mov rbx, rdi
cmp rdi, rcx
jae 0x140011489
nop word [rax + rax]
movzx eax, byte [rbx]
cmp byte [rbp + rax + 0x4d0], 0
jne 0x140011810
inc rbx
cmp rbx, rcx
jb 0x140011470
mov rbx, 0xffffffffffffffff
xor eax, eax
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
movsxd r8, ebx
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp + 0x170]
cmp r15, 0x10
cmovae rdx, r14
lea rcx, [rbp + 0x80]
call fcn.140004940
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x140011511
inc rdx
mov rcx, qword [0x1403a7a88]
cmp rdx, 0x1000
jb 0x14001150c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001266a
mov rcx, r8
call fcn.140027840
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [0x1403a7a88], xmm0
movups xmm1, xmmword [rbp + 0x90]
movups xmmword [0x1403a7a98], xmm1
lea eax, [rbx + 1]
movsxd rcx, eax
xor r15d, r15d
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov rax, qword [rbp + 0x180]
cmp rax, rcx
jb 0x14001263a
sub rax, rcx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
cmovae rdx, qword [rbp + 0x170]
add rdx, rcx
lea rcx, [rbp + 0x60]
call fcn.140004940
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x1400115cb
inc rdx
mov rcx, qword [0x1403a7aa8]
cmp rdx, 0x1000
jb 0x1400115c6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001266a
mov rcx, r8
call fcn.140027840
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [0x1403a7aa8], xmm0
movups xmm1, xmmword [rbp + 0x70]
movups xmmword [0x1403a7ab8], xmm1
lea r14, [0x140062ac0]
lea rsi, vtable.std::ios_base.0
mov qword [rbp + 0x248], r15
mov qword [rbp + 0x258], r15
mov qword [rbp + 0x260], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x248], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x900], xmm0
movups xmmword [rbp + 0x910], xmm0
movups xmmword [rbp + 0x920], xmm0
movups xmmword [rbp + 0x930], xmm0
movups xmmword [rbp + 0x940], xmm0
movups xmmword [rbp + 0x950], xmm0
mov dword [rbp + 0x960], eax
mov dword [rbp + 0x1a0], 0x64
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0x900]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov dword [rbp + 0x1f0], 0x101
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x9b0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea rax, [rbp + 0x9b0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140011690
lea rdx, [rbp + 0x9b0]
lea rcx, [rbp + 0x248]
call fcn.140004aa0
mov r8d, 1
lea rdx, [0x140062a4c]
lea rcx, [rbp + 0x248]
call fcn.140004aa0
lea rax, [rbp + 0x900]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400116d4
lea rdx, [rbp + 0x900]
lea rcx, [rbp + 0x248]
call fcn.140004aa0
mov qword [rbp + 0x1c8], r15
mov qword [rbp + 0x1d8], r15
mov qword [rbp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c8], 0
mov dword [rbp + 0x1b0], 0x67452301
mov dword [rbp + 0x1b4], 0xefcdab89
mov dword [rbp + 0x1b8], 0x98badcfe
mov dword [rbp + 0x1bc], 0x10325476
mov dword [rbp + 0x1c0], 0xc3d2e1f0
xor r8d, r8d
lea rdx, [0x1400624ab]
lea rcx, [rbp + 0x1c8]
call fcn.140004940
mov qword [rbp + 0x1e8], r15
xor edx, edx
mov r8d, 0xf0
lea rcx, [rbp + 0x2b0]
call fcn.14002a040
lea rdx, [rbp + 0x248]
lea rcx, [rbp + 0x2b0]
call fcn.140013b80
nop
nop dword [rax + rax]
mov r8d, 0x40
sub r8, qword [rbp + 0x1d8]
lea rdx, [rbp + 0x970]
lea rcx, [rbp + 0x2b0]
call fcn.140013d10
mov rdi, qword [rbp + 0x2b8]
mov rcx, qword [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1e0]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14001188b
lea rax, [rcx + rdi]
mov qword [rbp + 0x1d8], rax
lea rbx, [rbp + 0x1c8]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x1c8]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x970]
mov rcx, rbx
call fcn.140029990
mov byte [rbx + rdi], 0
jmp 0x1400118a6
sub rbx, rdi
jmp 0x140011490
mov byte [0x1403aae44], 1
lea rdx, str.account_login__lemoncheats.net_
lea rcx, [0x1403a90d0]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
lea rdx, str.enter_username_:
lea rcx, [0x1403a90d0]
call fcn.140005ff0
lea rdx, [0x1403a7a88]
lea rcx, [0x1403a9370]
call fcn.140018260
lea rdx, str.enter_password_:
lea rcx, [0x1403a90d0]
call fcn.140005ff0
lea rdx, [0x1403a7aa8]
lea rcx, [0x1403a9370]
call fcn.140018260
jmp 0x1400115ef
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x970]
mov rdx, rdi
lea rcx, [rbp + 0x1c8]
call fcn.1400064e0
cmp qword [rbp + 0x1d8], 0x40
jne 0x140011903
lea rdx, [rbp + 0x890]
lea rcx, [rbp + 0x1c8]
call fcn.140009a50
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0x890]
lea rcx, [rbp + 0x1b0]
call fcn.140008890
lea rax, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae rax, qword [rbp + 0x1c8]
mov qword [rbp + 0x1d8], r15
mov byte [rax], 0
jmp 0x140011790
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx + 0x2ac], edx
lea rcx, [rbp + 0x2c0]
call fcn.140002b60
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2b0], rax
mov rax, qword [rbp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x2ac], edx
mov qword [rbp + 0x340], rsi
lea rcx, [rbp + 0x340]
call fcn.1400242c4
nop
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x1b0]
call fcn.140009cd0
nop
lea rdi, [rbp + 0x218]
mov r8, qword [rbp + 0x218]
cmp qword [rbp + 0x230], 0x10
cmovae rdi, r8
lea rsi, [rbp + 0x218]
cmovae rsi, r8
add rsi, qword [rbp + 0x228]
lea rbx, [rbp + 0x218]
cmp qword [rbp + 0x230], 0x10
cmovae rbx, r8
cmp rbx, rsi
je 0x1400119f3
sub rdi, rbx
nop
movsx ecx, byte [rbx]
call fcn.1400328a8
mov byte [rbx + rdi], al
inc rbx
cmp rbx, rsi
jne 0x1400119e0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.lemoncheats.net
lea rcx, [rbp - 0x70]
call fcn.140004940
nop
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], 0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x10]
mov r8d, 0x50
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x5d0]
call fcn.14000ce70
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140011aa6
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011aa0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012640
call fcn.140027840
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140011ae1
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011adc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012646
call fcn.140027840
lea rax, vtable.httplib::Client.0
mov qword [rbp + 0x5d0], rax
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140011b2a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011b25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001264c
call fcn.140027840
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], r15
mov ecx, 0x60
call fcn.140027ae4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x190], rax
lea r9, [0x1403a7a88]
lea r8, [0x140062a60]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x190]
call fcn.14001af10
lea r9, [0x140062a6c]
lea r8, [0x140062a70]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x190]
call fcn.14001b090
lea r9, [0x1403a7aa8]
lea r8, [0x140062a78]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x190]
call fcn.14001af10
lea r9, [rbp + 0x218]
lea r8, str.hwid
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x190]
call fcn.14001af10
lea r9, str.bannerlord
lea r8, [0x140062a9c]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x190]
call fcn.14001b090
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
mov ecx, 0x60
call fcn.140027ae4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x268]
call fcn.14000c2d0
nop
mov qword [rbp + 0x148], r15
lea rax, [rbp + 0x110]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x268]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x5d0]
call fcn.14000fd00
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x140011ccb
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011cc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012652
call fcn.140027840
mov qword [rbp + 0x278], r15
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
lea rcx, [rbp - 0x80]
call fcn.140012b50
nop
mov rsi, qword [rbp + 0x238]
add rsi, 0x38
mov r8, qword [rsi + 0x10]
mov rdx, rsi
mov r9, qword [rsi + 0x18]
cmp r9, 0x10
jb 0x140011d0d
mov rdx, qword [rsi]
cmp r8, 5
jne 0x140011e10
mov rcx, r15
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r14 + rcx - 1]
jne 0x140011d39
cmp rcx, 5
jne 0x140011d20
mov eax, r15d
jmp 0x140011d3e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140011e10
mov r13b, 1
cmp byte [0x1403aae44], al
je 0x140011f3e
lea rcx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rcx, qword [rbp + 0x150]
lea rdx, [0x140062ac8]
call fcn.140032998
mov rbx, rax
lea rcx, [0x1403a7a88]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x1403a7a88]
mov r9, rax
mov r8, qword [0x1403a7a98]
mov edx, 1
call fcn.140034a38
mov r9, rbx
mov edx, 1
mov r8d, edx
lea rcx, [0x1400629fc]
call fcn.140034a38
lea rcx, [0x1403a7aa8]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x1403a7aa8]
mov r9, rbx
mov r8, qword [0x1403a7ab8]
mov edx, 1
call fcn.140034a38
mov rcx, rbx
call fcn.1400330a0
lea rdx, str.login_ok
lea rcx, [0x1403a90d0]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
jmp 0x140011f3e
mov rcx, rsi
cmp r9, 0x10
jb 0x140011e1c
mov rcx, qword [rsi]
cmp r8, 0xa
jne 0x140011e52
lea rdx, str.hwid_error
call fcn.14002a200
test eax, eax
jne 0x140011e52
lea rdx, str.hardware_id_failed
lea rcx, [0x1403a90d0]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
jmp 0x140011f3e
mov byte [0x1403aae44], 1
mov rdi, qword [rbp + 0x160]
lea rbx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rbx, qword [rbp + 0x150]
call fcn.140024a50
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rdi
lea r8, [rbp + 0x30]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.140007da0
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
call fcn.140024e80
mov qword [rsp + 0x50], rax
shr rax, 0x20
test eax, eax
jne 0x14001261f
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140011ef8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011ef3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012658
call fcn.140027840
lea rdx, str.login_failed
lea rcx, [0x1403a90d0]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x140011f21
mov rsi, qword [rsi]
mov rdx, rsi
lea rcx, [0x1403a90d0]
call fcn.140006f50
mov rcx, rax
call fcn.140005f60
call fcn.140013e00
nop
mov rcx, qword [rbp + 0x240]
test rcx, rcx
je 0x140011f85
mov eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140011f85
mov rbx, qword [rbp + 0x240]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140011f85
mov rcx, qword [rbp + 0x240]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
lea rcx, [rbp + 0x190]
call fcn.140012b50
nop
lea rcx, [rbp + 0x5d0]
call fcn.14000d130
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 0x10
jb 0x140011fe0
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011fdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001265e
call fcn.140027840
mov qword [rbp + 0x228], r15
mov qword [rbp + 0x230], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x218], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x14001203a
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012035
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012664
call fcn.140027840
mov qword [rbp + 0x1d8], r15
mov qword [rbp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x260]
cmp rdx, 0x10
jb 0x140012094
inc rdx
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001208f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001266a
call fcn.140027840
test r13b, r13b
je 0x14001131d
mov qword [rbp + 0x1f8], r15
mov qword [rbp + 0x208], r15
mov qword [rbp + 0x210], 7
mov word [rbp + 0x1f8], r15w
mov r8d, 0x25
lea rdx, str.TaleWorlds.MountAndBlade.Launcher.exe
lea rcx, [rbp + 0x1f8]
call fcn.140014850
nop
lea rdx, str.waiting_for_TaleWorlds.MountAndBlade.Launcher.exe_to_start
lea rcx, [0x1403a90d0]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
movabs rsi, 0x7fffffffffffffff
cmp dword [0x1403aae40], 0
jne 0x140012183
movabs rdi, 0x7ffffffffa0a1eff
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0xf0]
call fcn.140013f60
mov rcx, rax
call fcn.140021a30
mov dword [0x1403aae40], eax
call fcn.1400250a4
mov rbx, rax
call fcn.140025088
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x14001216b
add rax, 0x5f5e100
mov qword [rsp + 0x58], rax
jmp 0x140012170
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.1400186a0
cmp dword [0x1403aae40], 0
je 0x140012110
mov dword [rbp + 0x3a0], 0x130
xor edx, edx
mov r8d, 0x12c
lea rcx, [rbp + 0x3a4]
call fcn.14002a040
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
jne 0x1400121f3
nop dword [rax]
nop dword [rax + rax]
mov ecx, dword [rbp + 0x3a8]
cmp dword [0x1403aae40], ecx
je 0x14001224a
lea rdx, [rbp + 0x3a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, 1
je 0x1400121d0
lea rdx, str.____process
lea rcx, [0x1403a9400]
call fcn.1400163f0
lea rdx, [rbp + 0x1f8]
cmp qword [rbp + 0x210], 8
cmovae rdx, qword [rbp + 0x1f8]
mov r8, qword [rbp + 0x208]
mov rcx, rax
call fcn.140018ac0
lea rdx, [0x140062c00]
mov rcx, rax
call fcn.1400163f0
mov rcx, rax
call fcn.140016720
call fcn.140013e00
jmp 0x140012243
lea rdx, str.process_found
lea rcx, [0x1403a90d0]
call fcn.140005ff0
mov rcx, rax
call fcn.140005f60
call fcn.1400250a4
mov rbx, rax
call fcn.140025088
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffff88ca6bff
cmp rax, rcx
jge 0x1400122a9
add rax, 0x77359400
mov qword [rsp + 0x58], rax
jmp 0x1400122ae
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x58]
call fcn.1400186a0
mov r8d, dword [0x1403aae40]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x140012243
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.OpenProcess_success
lea rcx, [rbp + 0x40]
call fcn.140004940
lea rcx, [rbp + 0x40]
call fcn.140002070
mov rcx, rsi
call fcn.140010770
test al, al
je 0x140012475
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rsi
call fcn.140010cc0
test al, al
je 0x140012475
mov dword [rbp + 0x8d0], 0x378c8278
mov dword [rbp + 0x8d4], 0x4e381110
mov dword [rbp + 0x8d8], 0x1050be1
mov dword [rbp + 0x8dc], 0x5040301
mov dword [rbp + 0x8e0], 0x554d4d16
mov dword [rbp + 0x8e4], 0x62573857
mov dword [rbp + 0x8e8], 0x4a0d9e4d
mov dword [rbp + 0x8ec], 0x4030201
lea rdx, [rbp + 0x8d0]
call fcn.140022280
mov qword [0x1403ab310], 0
mov dword [0x1403ab318], 0
mov dword [0x1403ab31c], 0x5000000
mov ecx, reloc.WS2_32.dll_recv
lea rbx, [0x1400c24b0]
mov edi, 0x84800
lea r14, [0x1403ab220]
cmp rcx, 0x10
jne 0x14001241c
movaps xmm0, xmmword [0x1403ab310]
movups xmmword [rbp + 0x8f0], xmm0
lea rcx, [rbp + 0x8f0]
call fcn.1400227e0
mov eax, reloc.WS2_32.dll_ntohs
nop word [rax + rax]
movzx ecx, byte [rax + r14 + 0xf0]
cmp cl, 0xff
jne 0x14001240f
mov byte [rax + r14 + 0xf0], 0
sub rax, 1
jns 0x1400123f0
jmp 0x140012419
inc cl
mov byte [rax + r14 + 0xf0], cl
mov rcx, r15
movzx eax, byte [rbp + rcx + 0x8f0]
xor byte [rbx], al
inc rbx
inc rcx
sub rdi, 1
jne 0x1400123c5
mov rcx, rsi
call fcn.140021780
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
lea rcx, [rsp + 0x60]
test al, al
jne 0x1400125f8
lea r8d, [rdi + 0xd]
lea rdx, str.step_2_failed
call fcn.140004940
lea rcx, [rsp + 0x60]
call fcn.140002070
nop
mov rdx, qword [rbp + 0x210]
cmp rdx, 8
jb 0x1400124bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400124b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012670
call fcn.140027840
mov qword [rbp + 0x208], r15
mov qword [rbp + 0x210], 7
mov word [rbp + 0x1f8], r15w
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x140012516
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012511
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012676
call fcn.140027840
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x140012570
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001256b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001267c
call fcn.140027840
mov qword [rbp + 0x160], r15
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x150], 0
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0x10
jb 0x1400125c6
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400125c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012619
call fcn.140027840
xor eax, eax
mov rcx, qword [rbp + 0xac0]
xor rcx, rsp
call fcn.140027820
lea r11, [rsp + 0xbd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.____cheat_injected
call fcn.140004940
lea rcx, [rsp + 0x60]
call fcn.140002070
jmp 0x140012243
call fcn.140031c3c
nop
lea r8, [rbp - 0x50]
mov edx, dword [rsp + 0x54]
lea rcx, str.remove
call fcn.140008600
nop
call fcn.140001440
nop
call fcn.140005e00
nop
call fcn.140031c3c
nop
call fcn.140031c3c
nop
call fcn.140031c3c
nop
call fcn.140031c3c
nop
call fcn.140031c3c
nop
call fcn.140031c3c
nop
call fcn.140031c3c
nop
call fcn.140031c3c
int3
call fcn.140031c3c
nop
call fcn.140031c3c
nop
call fcn.140031c3c
int3