Function at 0x140009580
Capabilities:
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x14008d0c0]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor r13d, r13d
lea rcx, str.Storm_Unban
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.MODE_CON_COLS50_LINES9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14008e1b0]
call fcn.1400172c0
cmp byte [0x14008e3c0], r13b
jne 0x140009618
lea rdx, str._n_Status:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
mov rcx, rax
lea rdx, [0x14008e3c8]
call fcn.140007ba0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowScrollBar]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], r13b
lea rdx, str.___Product:_Lime_Spoofer
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
lea rdx, str._n___Status:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
mov rcx, rax
lea rdx, str._Undetected
call fcn.1400079d0
lea rdx, str._n_n___Enter_Key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140007c00
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea r14, [rbp - 0x30]
mov r15, qword [rbp - 0x18]
cmp r15, 0xf
seta r12b
mov rdi, qword [rbp - 0x30]
cmova r14, rdi
movabs rsi, 0x7fffffffffffffff
mov rbx, qword [rbp - 0x20]
cmp rbx, rsi
ja 0x1400099c0
cmp rbx, 0xf
ja 0x1400096fa
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x60], xmm0
jmp 0x140009796
mov rax, rbx
or rax, 0xf
mov qword [rbp - 0x38], rax
cmp rax, rsi
jbe 0x140009736
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006dd70
mov rcx, rax
test rax, rax
je 0x140009765
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000977b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov qword [rbp - 0x38], rcx
cmp rax, rcx
cmovb rax, rcx
mov rsi, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x14000976c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400099c6
jmp 0x140009718
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009778
call fcn.14006dd70
jmp 0x14000977b
mov rax, r13
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rsi
lea r8, [rbx + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp - 0x60]
lea rcx, [0x14008e1b0]
call fcn.140018c50
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.___SuccessFully_Connected
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14008e3c0], 0
jne 0x1400097ff
lea rdx, str._nSuccessFully_Connected
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
test r12b, r12b
je 0x140009840
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140009830
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009830
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.14006e0c4
nop dword [rax + rax]
lea rcx, [0x140080a58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 1
call fcn.14006dd70
mov rcx, qword [0x14008d158]
mov qword [0x14008d158], rax
test rcx, rcx
je 0x140009874
mov edx, 1
call fcn.14006e0c4
mov ecx, 0x60
call fcn.14006dd70
mov rbx, rax
mov qword [rbp - 0x40], rax
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
mov r8d, 8
lea rdx, str.save.txt
mov rcx, rax
call fcn.140004560
nop
xorps xmm0, xmm0
movups xmmword [rbx + 0x20], xmm0
mov qword [rbx + 0x30], r13
mov qword [rbx + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbx + 0x20], 0
lea rcx, [rbx + 0x40]
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], r13
mov r8d, Ordinal_26
lea rdx, str.FiveM.appCitizenFX.ini
call fcn.140004560
nop
mov rdx, qword [0x14008d160]
mov qword [0x14008d160], rbx
test rdx, rdx
je 0x14000990e
call fcn.1400042a0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140080a58]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.___1___:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
mov rcx, rax
lea rdx, str.Clean_Fivem
call fcn.1400079d0
lea rdx, [0x140007bc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___2___:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400079d0
mov rcx, rax
lea rdx, str.Spoof_FiveM
call fcn.1400079d0
lea rdx, [0x140007bc0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp - 0x38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp - 0x38]
sub ecx, 1
je 0x1400099b6
cmp ecx, 1
jne 0x140009840
call fcn.140002e80
jmp 0x140009840
call fcn.140001e90
jmp 0x140009840
call fcn.1400014b0
int3
call fcn.140001410
int3