Function at 0x140001ed0
Capabilities:
Execute command
Self delete
Set console window title

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe8
movabs r14, 0x7fffffffffffffff
movabs r15, 0x7ffffffffd050f7f
xor r13d, r13d
lea r12, vtable.type_info.0
movabs rbx, 0x7fffffffc46535ff
lea rcx, str.color_5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Ioctl_Free_Cleaner_For_All
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rcx, [0x140010708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140010710]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002b10
lea rdx, [0x140010710]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002b10
lea rdx, [0x140010710]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002b10
lea rdx, str.____________________________________________________IOCTL_____________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002b10
lea rdx, str.____________________________________________________IOCTL_____________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002b10
lea rcx, [rbp + 0x6f]
call fcn.1400011c0
mov rax, qword [rbp + 0x6f]
cmp rax, rbx
jge 0x140001fb5
add rax, 0x3b9aca00
mov qword [rbp + 0x67], rax
jmp 0x140001fb9
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
lea rcx, [0x140010708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x20
call fcn.140003020
mov rsi, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0x1e
mov qword [rsp + 0x38], 0x1f
movups xmm0, xmmword [str._n_1_________Clean_Fivem_______]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140010808]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140010810]
mov dword [rax + 0x18], ecx
movzx ecx, word [0x140010814]
mov word [rax + 0x1c], cx
lea rdi, [rax + 0x1e]
mov byte [rdi], 0
mov rbx, rax
cmp rax, rdi
je 0x14000209f
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002940
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp + 0x77]
call fcn.1400011c0
mov rax, qword [rbp + 0x77]
cmp rax, r15
jge 0x14000208a
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x14000208e
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
inc rbx
cmp rbx, rdi
jne 0x140002050
mov edx, 0x20
mov rcx, rsi
call fcn.14000305c
lea rdx, [0x140002cf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov ecx, 0x30
call fcn.140003020
mov rsi, rax
mov qword [rbp - 0x61], rax
mov qword [rbp - 0x51], 0x21
mov qword [rbp - 0x49], 0x2f
movups xmm0, xmmword [str._n_2_________Clean_Fortnite_______]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140010828]
movups xmmword [rax + 0x10], xmm1
movzx ecx, byte [0x140010838]
mov byte [rax + 0x20], cl
lea rdi, [rax + 0x21]
mov byte [rdi], 0
mov rbx, rax
cmp rax, rdi
je 0x14000216f
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002940
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp + 0x7f]
call fcn.1400011c0
mov rax, qword [rbp + 0x7f]
cmp rax, r15
jge 0x14000215a
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x14000215e
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
inc rbx
cmp rbx, rdi
jne 0x140002120
mov edx, 0x30
mov rcx, rsi
call fcn.14000305c
mov qword [rbp - 0x51], r13
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
lea rdx, [0x140002cf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x20
call fcn.140003020
mov rsi, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0x1b
mov qword [rsp + 0x38], 0x1f
movups xmm0, xmmword [str._n_3_________Clean_R6_______]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140010850]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140010858]
mov word [rax + 0x18], cx
movzx ecx, byte [0x14001085a]
mov byte [rax + 0x1a], cl
lea rdi, [rax + 0x1b]
mov byte [rdi], 0
mov rbx, rax
cmp rax, rdi
je 0x140002261
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002940
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rsp + 0x40]
call fcn.1400011c0
mov rax, qword [rsp + 0x40]
cmp rax, r15
jge 0x14000224c
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x140002250
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
inc rbx
cmp rbx, rdi
jne 0x140002210
mov edx, 0x20
mov rcx, rsi
call fcn.14000305c
lea rdx, [0x140002cf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov ecx, 0x30
call fcn.140003020
mov rsi, rax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x29], 0x21
mov qword [rbp - 0x21], 0x2f
movups xmm0, xmmword [str._n_4_________Clean_Valorant_______]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140010870]
movups xmmword [rax + 0x10], xmm1
movzx ecx, byte [0x140010880]
mov byte [rax + 0x20], cl
lea rdi, [rax + 0x21]
mov byte [rdi], 0
mov rbx, rax
cmp rax, rdi
je 0x140002331
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002940
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rsp + 0x48]
call fcn.1400011c0
mov rax, qword [rsp + 0x48]
cmp rax, r15
jge 0x14000231c
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x140002320
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
inc rbx
cmp rbx, rdi
jne 0x1400022e0
mov edx, 0x30
mov rcx, rsi
call fcn.14000305c
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
lea rdx, [0x140002cf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x20
call fcn.140003020
mov rsi, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0x17
mov qword [rsp + 0x38], 0x1f
movups xmm0, xmmword [str._n_5_________Exit_______]
movups xmmword [rax], xmm0
mov ecx, dword [0x140010898]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x14001089c]
mov word [rax + 0x14], cx
movzx ecx, byte [0x14001089e]
mov byte [rax + 0x16], cl
lea rdi, [rax + 0x17]
mov byte [rdi], 0
mov rbx, rax
cmp rax, rdi
je 0x14000241f
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002940
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp - 0x79]
call fcn.1400011c0
mov rax, qword [rbp - 0x79]
cmp rax, r15
jge 0x14000240a
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x14000240e
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
inc rbx
cmp rbx, rdi
jne 0x1400023d0
mov edx, 0x20
mov rcx, rsi
call fcn.14000305c
lea rcx, str.color_3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140002cf0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, str._n____Enter_your_option:
call fcn.140002b10
lea rdx, [0x1400140cc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [0x1400140cc]
sub ecx, 1
je 0x1400026b1
sub ecx, 1
je 0x1400025f7
sub ecx, 1
je 0x140002593
sub ecx, 1
je 0x140002589
cmp ecx, 1
je 0x1400026f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov ecx, 0x30
call fcn.140003020
mov rsi, rax
mov qword [rbp - 0x11], rax
mov qword [rbp - 1], 0x21
mov qword [rbp + 7], 0x2f
movups xmm0, xmmword [str.Invalid_Choice__Please_try_again.]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400108f0]
movups xmmword [rax + 0x10], xmm1
movzx ecx, byte [0x140010900]
mov byte [rax + 0x20], cl
lea rdi, [rax + 0x21]
mov byte [rdi], 0
mov rbx, rax
cmp rax, rdi
je 0x14000254f
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002940
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp - 0x71]
call fcn.1400011c0
mov rax, qword [rbp - 0x71]
cmp rax, r15
jge 0x14000253a
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x14000253e
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
inc rbx
cmp rbx, rdi
jne 0x140002500
mov edx, 0x30
mov rcx, rsi
call fcn.14000305c
mov qword [rbp - 1], r13
mov qword [rbp + 7], 0xf
mov byte [rbp - 0x11], 0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140010708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140001f07
call fcn.1400014b0
jmp 0x140001f07
call fcn.1400012a0
lea rcx, str.del_C:_Program_Files__x86__Ubisoft_Ubisoft_Game_Launcher_cache__f__Q___NUL_2___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:_Program_Files__x86__Ubisoft_Ubisoft_Game_Launcher__savegames__f__Q___NUL_2___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:Users_USERNAME_AppDataLocal_Ubisoft_Game_Launcher__spool__f__Q___NUL_2___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:Users_USERNAME_AppDataLocalTemp__f__Q___NUL_2___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del_C:WindowsTemp__f__Q___NUL_2___NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
lea r8, str.Shadow
lea rdx, str.Clean_Done
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140001f07
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x20
call fcn.140003020
mov rsi, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0x18
mov qword [rsp + 0x38], 0x1f
movups xmm0, xmmword [str.Chooser_function_called_]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400106b8]
movsd qword [rax + 0x10], xmm0
lea rdi, [rax + 0x18]
mov byte [rdi], 0
mov rbx, rax
cmp rax, rdi
je 0x14000269f
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002940
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp - 0x69]
call fcn.1400011c0
mov rax, qword [rbp - 0x69]
cmp rax, r15
jge 0x14000268a
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x14000268e
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
inc rbx
cmp rbx, rdi
jne 0x140002650
mov edx, 0x20
mov rcx, rsi
call fcn.14000305c
jmp 0x140001f07
call fcn.1400012a0
lea rbx, str.takeown__A__R__D_Y__F_C:windows_temp
nop dword [rax]
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add rbx, 8
cmp rbx, r12
jne 0x1400026c0
xor r9d, r9d
lea r8, str.Shadow
lea rdx, str.Clean_Done
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140001f07
lea rdx, str.Exiting_..ioctl_nooooo
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002b10
lea rcx, [rbp + 0x67]
call fcn.1400011c0
mov rax, qword [rbp + 0x67]
movabs rcx, 0x7fffffffc46535ff
cmp rax, rcx
jge 0x14000272b
add rax, 0x3b9aca00
mov qword [rbp + 0x67], rax
jmp 0x14000272f
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.140002d30
xor eax, eax
add rsp, 0xe8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret