Function at 0x401ce0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43cd00
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x446040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x446428], 0x30
mov dword [0x44642c], 0x40
mov dword [0x446430], 0x401000
mov dword [0x446434], 0
mov dword [0x446438], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x44643c], eax
push 0x446428
movups xmmword [0x446440], xmm0
mov dword [0x446450], 0x43e37c
mov dword [0x446454], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x44643c]
push 0
push 0
push 0x12c
push 0x1f4
push 0x64
push 0x64
push 0x80000000
push str.Cheat_Menu
push str.Cheat_Menu_Class
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x446420], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x446420]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x44641c], ecx
test ecx, ecx
je 0x401e61
push 0x446424
push 0x446458
push 0x40
push dword [0x446420]
xorps xmm0, xmm0
mov dword [0x44646c], 0
push 1
movlpd qword [0x446458], xmm0
movlpd qword [0x446464], xmm0
mov dword [0x446474], 0
movlpd qword [0x446484], xmm0
mov dword [0x446478], 1
mov dword [0x446470], 1
mov dword [0x446460], 0
mov dword [0x44647c], 1
mov dword [0x446480], 0x50
mov dword [0x44648c], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.00401220
cmp byte [0x446098], 0
je 0x40209a
call fcn.00401620
call fcn.00401870
mov dword [ebp - 4], 1
call fcn.0040b170
mov ecx, dword [0x446424]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x446424]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x446424]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x446424]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x446424]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x401f2a
call fcn.0040b540
mov eax, dword [0x44649c]
xor ecx, ecx
mov eax, dword [eax + 0x4a34]
mov eax, dword [eax]
add eax, 0x3c
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042cad0
mov eax, dword [0x446424]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x446424]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x401f5c
mov eax, dword [0x446424]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x401f5c
call fcn.00401150
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.00401bc0
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
cmp esi, 0xff67697f
jne 0x401f81
cmp ebx, 0x7fffffff
je 0x401fa8
cmp ebx, 0x7fffffff
jg 0x401f97
jl 0x401f93
cmp esi, 0xff67697f
jae 0x401f97
or al, 0xff
jmp 0x401f99
mov al, 1
test al, al
jns 0x401fa8
add esi, 0x989680
adc ebx, 0
jmp 0x401fb0
or esi, 0xffffffff
mov ebx, 0x7fffffff
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], esi
lea ecx, [ebp - 0x30]
call fcn.00401bc0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
cmp esi, edx
jne 0x401fd0
cmp ebx, ecx
je 0x40208d
cmp ebx, ecx
jg 0x401fde
jl 0x401fda
cmp esi, edx
jae 0x401fde
or al, 0xff
jmp 0x401fe0
mov al, 1
test al, al
jle 0x40208d
mov edi, esi
mov esi, ebx
sub edi, edx
sbb esi, ecx
cmp edi, 0x914f0000
jne 0x402000
cmp esi, 0x4e94
je 0x40207b
cmp esi, 0x4e94
jg 0x40207b
jl 0x402012
cmp edi, 0x914f0000
jae 0x40207b
push 0
push 0xf4240
push esi
push edi
call fcn.0043c980
push 0
mov ebx, eax
mov eax, edx
push 0xf4240
push eax
push ebx
mov dword [ebp - 0x14], eax
call fcn.0043cb10
cmp eax, edi
jne 0x40203d
cmp edx, esi
je 0x402064
cmp edx, esi
jg 0x402064
jl 0x402047
cmp eax, edi
jae 0x402064
mov eax, dword [ebp - 0x14]
add ebx, 1
push ebx
adc eax, 0
mov dword [ebp - 0x14], eax
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
jmp 0x401fb6
mov eax, dword [ebp - 0x14]
push ebx
mov dword [ebp - 0x14], eax
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
jmp 0x401fb6
push 0x5265c00
call sub.KERNEL32.dll_Sleep
mov esi, dword [ebp - 0x10]
jmp 0x401fb6
cmp byte [0x446098], 0
jne 0x401e73
call fcn.004013e0
mov dword [ebp - 4], 2
mov ecx, dword [0x446424]
test ecx, ecx
je 0x4020c0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x446424], 0
mov ecx, dword [0x44641c]
test ecx, ecx
je 0x4020da
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44641c], 0
push dword [0x446420]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x44643c]
push dword [0x446450]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10