Function at 0x401ef0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43ecd0
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x448040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x448424], 0x30
mov dword [0x448428], 0x40
mov dword [0x44842c], 0x401000
mov dword [0x448430], 0
mov dword [0x448434], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x448438], eax
push 0x448424
movups xmmword [0x44843c], xmm0
mov dword [0x44844c], 0x440268
mov dword [0x448450], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x448438]
push 0
push 0
push 0x136
push 0x1cc
push 0x64
push 0x64
push 0x80000000
push str.Cheat_Menu
push str.class001
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x44841c], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x44841c]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x448418], ecx
test ecx, ecx
je 0x402071
push 0x448420
push 0x448454
push 0x40
push dword [0x44841c]
xorps xmm0, xmm0
mov dword [0x448468], 0
push 1
movlpd qword [0x448454], xmm0
movlpd qword [0x448460], xmm0
mov dword [0x448470], 0
movlpd qword [0x448480], xmm0
mov dword [0x448474], 1
mov dword [0x44846c], 1
mov dword [0x44845c], 0
mov dword [0x448478], 1
mov dword [0x44847c], 0x50
mov dword [0x448488], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.004012b0
cmp byte [0x448098], 0
je 0x4022aa
call fcn.00401980
call fcn.00401be0
mov dword [ebp - 4], 1
call fcn.0040b270
mov ecx, dword [0x448420]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x448420]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x448420]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x448420]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x448420]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x40213a
call fcn.0040b640
mov eax, dword [0x4484a0]
xor ecx, ecx
mov eax, dword [eax + 0x4a34]
mov eax, dword [eax]
add eax, 0x3c
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042d6b0
mov eax, dword [0x448420]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x448420]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x40216c
mov eax, dword [0x448420]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x40216c
call fcn.004011e0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.00401dd0
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
cmp esi, 0xffb3b4bf
jne 0x402191
cmp ebx, 0x7fffffff
je 0x4021b8
cmp ebx, 0x7fffffff
jg 0x4021a7
jl 0x4021a3
cmp esi, 0xffb3b4bf
jae 0x4021a7
or al, 0xff
jmp 0x4021a9
mov al, 1
test al, al
jns 0x4021b8
add esi, 0x4c4b40
adc ebx, 0
jmp 0x4021c0
or esi, 0xffffffff
mov ebx, 0x7fffffff
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], esi
lea ecx, [ebp - 0x30]
call fcn.00401dd0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
cmp esi, edx
jne 0x4021e0
cmp ebx, ecx
je 0x40229d
cmp ebx, ecx
jg 0x4021ee
jl 0x4021ea
cmp esi, edx
jae 0x4021ee
or al, 0xff
jmp 0x4021f0
mov al, 1
test al, al
jle 0x40229d
mov edi, esi
mov esi, ebx
sub edi, edx
sbb esi, ecx
cmp edi, 0x914f0000
jne 0x402210
cmp esi, 0x4e94
je 0x40228b
cmp esi, 0x4e94
jg 0x40228b
jl 0x402222
cmp edi, 0x914f0000
jae 0x40228b
push 0
push 0xf4240
push esi
push edi
call fcn.0043e940
push 0
mov ebx, eax
mov eax, edx
push 0xf4240
push eax
push ebx
mov dword [ebp - 0x14], eax
call fcn.0043ead0
cmp eax, edi
jne 0x40224d
cmp edx, esi
je 0x402274
cmp edx, esi
jg 0x402274
jl 0x402257
cmp eax, edi
jae 0x402274
mov eax, dword [ebp - 0x14]
add ebx, 1
push ebx
adc eax, 0
mov dword [ebp - 0x14], eax
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
jmp 0x4021c6
mov eax, dword [ebp - 0x14]
push ebx
mov dword [ebp - 0x14], eax
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
jmp 0x4021c6
push 0x5265c00
call sub.KERNEL32.dll_Sleep
mov esi, dword [ebp - 0x10]
jmp 0x4021c6
cmp byte [0x448098], 0
jne 0x402083
call fcn.00401740
mov dword [ebp - 4], 2
mov ecx, dword [0x448420]
test ecx, ecx
je 0x4022d0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x448420], 0
mov ecx, dword [0x448418]
test ecx, ecx
je 0x4022ea
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x448418], 0
push dword [0x44841c]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x448438]
push dword [0x44844c]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10