Function at 0x4018b0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x429fa0
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x432040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x4325d4], 0x30
mov dword [0x4325d8], 0x40
mov dword [0x4325dc], 0x401000
mov dword [0x4325e0], 0
mov dword [0x4325e4], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x4325e8], eax
push 0x4325d4
movups xmmword [0x4325ec], xmm0
mov dword [0x4325fc], 0x42b258
mov dword [0x432600], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x4325e8]
push 0
push 0
push 0x2d0
push 0x500
push 0x64
push 0x64
push 0x90000000
push str.Cheat_Menu
push str.BiriXploit
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x4325cc], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x4325cc]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x4325c8], ecx
test ecx, ecx
je 0x401a34
push 0x4325d0
push 0x432604
push 0x40
push dword [0x4325cc]
xorps xmm0, xmm0
mov dword [0x432618], 0
push 1
movlpd qword [0x432604], xmm0
movlpd qword [0x432610], xmm0
mov dword [0x432620], 0
movlpd qword [0x432630], xmm0
mov dword [0x432624], 1
mov dword [0x43261c], 1
mov dword [0x43260c], 0
mov dword [0x432628], 1
mov dword [0x43262c], 0x50
mov dword [0x432638], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.00401170
cmp byte [0x4320a4], 0
je 0x401e71
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
mov edi, dword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [ebp - 0x3c], 0x43960000
mov dword [ebp - 0x38], 0x42480000
mov dword [ebp - 0x44], 0x43960000
mov dword [ebp - 0x40], 0x42480000
mov dword [ebp - 0x4c], 0x43960000
mov dword [ebp - 0x48], 0x42480000
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 1
push eax
call ebx
test eax, eax
je 0x401acb
nop dword [eax + eax]
lea eax, [ebp - 0x2c]
push eax
call esi
lea eax, [ebp - 0x2c]
push eax
call edi
cmp dword [ebp - 0x28], 0x12
jne 0x401ab9
mov byte [0x4320a4], 0
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
call ebx
test eax, eax
jne 0x401aa0
mov eax, dword [0x432650]
test eax, eax
je 0x401adc
mov ecx, dword [eax + 0xc8]
jmp 0x401ade
xor ecx, ecx
cmp dword [ecx + 0xc], 0
jne 0x401afc
test eax, eax
je 0x401afc
mov eax, dword [eax + 0xc8]
test eax, eax
je 0x401afc
cmp dword [eax], 0
je 0x401afc
call fcn.00424e10
call fcn.004253b0
call fcn.004068f0
mov dword [ebp - 4], 2
xor edx, edx
mov eax, dword [0x432650]
mov ecx, str.BiriXploit___Spoofer
push 0x103
or dword [eax + 0x1c84], 3
mov dword [eax + 0x1c94], 0x42480000
mov dword [eax + 0x1c98], 0x42480000
mov dword [eax + 0x1c9c], 0
mov dword [eax + 0x1ca0], 0
mov dword [eax + 0x1c88], 1
mov dword [eax + 0x1ca4], 0x44938000
mov dword [eax + 0x1ca8], 0x442a0000
mov dword [eax + 0x1c8c], 1
call fcn.0040ba50
add esp, 4
push str.Welcome_to_the_Lila_Black_Spoofer_UI
call fcn.00427010
mov eax, dword [0x432650]
add esp, 4
mov ecx, dword [eax + 0x1ba8]
cmp byte [ecx + 0x8f], 0
jne 0x401bb0
mov ecx, dword [ecx + 0x170]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.00428370
push ecx
lea edx, [ebp - 0x3c]
mov ecx, str.Run_Spoofer
call fcn.00427720
add esp, 4
test al, al
je 0x401be2
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Spoofer_started
call fcn.004014a0
push 0x4016c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push ecx
lea edx, [ebp - 0x44]
mov ecx, str.Clean_Logs
call fcn.00427720
add esp, 4
test al, al
je 0x401c14
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Logs_cleaned
call fcn.004014a0
push 0x4016c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push ecx
lea edx, [ebp - 0x4c]
mov ecx, str.Exit
call fcn.00427720
add esp, 4
test al, al
je 0x401c30
mov byte [0x4320a4], 0
call fcn.0040e2f0
mov dword [ebp - 4], 3
call fcn.00408ba0
mov ecx, dword [0x4325d0]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x4325d0]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x4325d0]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x4325d0]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff140a28
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x4325d0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x401ce2
call fcn.00408f30
mov eax, dword [0x432650]
xor ecx, ecx
mov eax, dword [eax + 0x1d4c]
mov eax, dword [eax]
add eax, 0x34
cmp byte [eax], cl
cmovne ecx, eax
call fcn.004248e0
mov eax, dword [0x4325d0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x4325d0]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x401d14
mov eax, dword [0x4325d0]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x401d14
call fcn.004010a0
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xffffffff
call fcn.004017b0
mov ebx, dword [ebp - 0x58]
mov esi, dword [ebp - 0x54]
cmp ebx, 0xffb3b4bf
jne 0x401d39
cmp esi, 0x7fffffff
je 0x401d60
cmp esi, 0x7fffffff
jg 0x401d4f
jl 0x401d4b
cmp ebx, 0xffb3b4bf
jae 0x401d4f
or al, 0xff
jmp 0x401d51
mov al, 1
test al, al
jns 0x401d60
add ebx, 0x4c4b40
adc esi, 0
jmp 0x401d68
or ebx, 0xffffffff
mov esi, 0x7fffffff
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], ebx
nop
lea ecx, [ebp - 0x60]
call fcn.004017b0
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
cmp ebx, edx
jne 0x401d8a
cmp esi, ecx
je 0x401e52
cmp esi, ecx
jg 0x401d98
jl 0x401d94
cmp ebx, edx
jae 0x401d98
or al, 0xff
jmp 0x401d9a
mov al, 1
test al, al
jle 0x401e52
sub ebx, edx
sbb esi, ecx
cmp ebx, 0x914f0000
jne 0x401dd4
cmp esi, 0x4e94
jne 0x401dda
push 0
push 0xf4240
push esi
push ebx
call fcn.00429bb0
mov edi, eax
push edi
call sub.KERNEL32.dll_Sleep
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x34]
jmp 0x401d70
cmp esi, 0x4e94
jg 0x401dea
jl 0x401de6
cmp ebx, 0x914f0000
jae 0x401dea
or al, 0xff
jmp 0x401dec
mov al, 1
test al, al
jle 0x401e06
mov edi, 0x5265c00
push edi
call sub.KERNEL32.dll_Sleep
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x34]
jmp 0x401d70
push 0
push 0xf4240
push esi
push ebx
call fcn.00429bb0
push 0
push 0xf4240
mov edi, eax
push edx
push edi
call fcn.00429d40
cmp eax, ebx
jne 0x401e2c
cmp edx, esi
je 0x401e41
cmp edx, esi
jg 0x401e3a
jl 0x401e36
cmp eax, ebx
jae 0x401e3a
or al, 0xff
jmp 0x401e3c
mov al, 1
test al, al
jns 0x401e41
inc edi
push edi
call sub.KERNEL32.dll_Sleep
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x34]
jmp 0x401d70
cmp byte [0x4320a4], 0
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
mov edi, dword [sym.imp.USER32.dll_DispatchMessageA]
jne 0x401a82
mov dword [ebp - 4], 4
mov ecx, dword [0x432650]
test ecx, ecx
je 0x401e8a
mov edi, dword [ecx + 0xc8]
jmp 0x401e8c
xor edi, edi
lea ebx, [ecx + 8]
test ecx, ecx
je 0x401efd
mov esi, dword [ecx + 0xc8]
test esi, esi
je 0x401efd
cmp dword [esi], 0
je 0x401efd
mov edx, dword [esi + 4]
test edx, edx
je 0x401ebc
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x432650]
mov dword [esi + 4], 0
mov edx, dword [esi + 8]
test edx, edx
je 0x401ed6
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x432650]
mov dword [esi + 8], 0
mov edx, dword [esi + 0xc]
test edx, edx
je 0x401efd
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x432650]
mov dword [esi + 0xc], 0
mov eax, dword [ecx + 0x98]
mov dword [eax + 4], 0
mov edx, dword [edi]
test edx, edx
je 0x401f0f
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x432650]
mov dword [ebx + 0xb8], 0
mov dword [ebx + 0xc0], 0
test ecx, ecx
je 0x401f2d
dec dword [ecx + 0x36c]
push edi
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call edi
mov eax, dword [0x432650]
add esp, 4
test eax, eax
je 0x401f4a
mov esi, dword [eax + 0xc4]
jmp 0x401f4c
xor esi, esi
mov ecx, dword [esi + 0x28]
lea ebx, [eax + 8]
test ecx, ecx
je 0x401f62
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x432650]
mov dword [ebx + 0xb4], 0
mov dword [ebx + 0xbc], 0
test eax, eax
je 0x401f80
dec dword [eax + 0x36c]
push esi
call edi
mov esi, dword [0x432650]
add esp, 4
mov ecx, esi
call fcn.00407fb0
cmp dword [0x432650], esi
jne 0x401fa5
mov dword [0x432650], 0
test esi, esi
je 0x401fc5
mov ecx, esi
call fcn.00415220
mov eax, dword [0x432650]
test eax, eax
je 0x401fbf
dec dword [eax + 0x36c]
push esi
call edi
add esp, 4
mov dword [ebp - 4], 5
mov ecx, dword [0x4325d0]
test ecx, ecx
je 0x401fe6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4325d0], 0
mov ecx, dword [0x4325c8]
test ecx, ecx
je 0x402000
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4325c8], 0
push dword [0x4325cc]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x4325e8]
push dword [0x4325fc]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00428c21
mov esp, ebp
pop ebp
ret 0x10