Function at 0x401950
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42f580
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0x438040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x438418], 0x30
mov dword [0x43841c], 0x40
mov dword [0x438420], 0x401000
mov dword [0x438424], 0
mov dword [0x438428], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x43842c], eax
push 0x438418
movups xmmword [0x438430], xmm0
mov dword [0x438440], 0x43024c
mov dword [0x438444], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x43842c]
push 0
push 0
push 0x12c
push 0x1f4
push 0x64
push 0x64
push 0x80000000
push str.Cheat_Menu
push str.Cheat_Menu_Class
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x438410], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x438410]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x43840c], ecx
test ecx, ecx
je 0x401ad4
push 0x438414
push 0x438448
push 0x40
push dword [0x438410]
xorps xmm0, xmm0
mov dword [0x43845c], 0
push 1
movlpd qword [0x438448], xmm0
movlpd qword [0x438454], xmm0
mov dword [0x438464], 0
mov dword [0x43846c], 0
movlpd qword [0x438474], xmm0
mov dword [0x438468], 1
mov dword [0x438460], 1
mov dword [0x438450], 0
mov dword [0x438470], 0x50
mov dword [0x43847c], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.004011e0
cmp byte [0x438098], 0
je 0x401dc0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
call fcn.004015e0
mov dword [ebp - 4], 1
mov edx, 0x438098
mov eax, dword [0x438490]
mov ecx, str.vision_beta
push 0x126
or dword [eax + 0x491c], 3
mov dword [eax + 0x492c], 0
mov dword [eax + 0x4930], 0
mov dword [eax + 0x4934], 0
mov dword [eax + 0x4938], 0
mov dword [eax + 0x4920], 1
mov dword [eax + 0x493c], 0x43fa0000
mov dword [eax + 0x4940], 0x43960000
mov dword [eax + 0x4924], 1
call fcn.0040ce50
lea edx, [ebp - 0x40]
call fcn.0042cfe0
add esp, 4
call fcn.0040f8e0
mov dword [ebp - 4], 2
call fcn.00409b20
mov ecx, dword [0x438414]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x438414]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x438414]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x438414]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x438414]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x401c2d
call fcn.00409f20
mov eax, dword [0x438490]
xor ecx, ecx
mov eax, dword [eax + 0x49fc]
mov eax, dword [eax]
add eax, 0x38
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042a030
mov eax, dword [0x438414]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x438414]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x401ca3
mov eax, dword [0x438414]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x401ca3
mov byte [ebp - 4], 3
mov eax, dword [0x438490]
test eax, eax
je 0x401c78
mov eax, dword [eax + 0x74]
test eax, eax
je 0x401c78
cmp dword [eax], 0
je 0x401c78
call fcn.0042a530
mov ecx, dword [0x438414]
push 0x438448
push ecx
mov eax, dword [ecx]
call dword [eax + 0x40]
mov eax, dword [0x438490]
test eax, eax
je 0x401ca3
mov eax, dword [eax + 0x74]
test eax, eax
je 0x401ca3
cmp dword [eax], 0
je 0x401ca3
call fcn.0042a530
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0xffffffff
call fcn.00401830
mov esi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x44]
cmp esi, 0xff67697f
jne 0x401cc8
cmp ebx, 0x7fffffff
je 0x401cef
cmp ebx, 0x7fffffff
jg 0x401cde
jl 0x401cda
cmp esi, 0xff67697f
jae 0x401cde
or al, 0xff
jmp 0x401ce0
mov al, 1
test al, al
jns 0x401cef
add esi, 0x989680
adc ebx, 0
jmp 0x401cf7
or esi, 0xffffffff
mov ebx, 0x7fffffff
mov dword [ebp - 0x24], esi
nop word [eax + eax]
lea ecx, [ebp - 0x30]
call fcn.00401830
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
cmp esi, ecx
jne 0x401d1a
cmp ebx, eax
je 0x401db3
cmp ebx, eax
jg 0x401d28
jl 0x401d24
cmp esi, ecx
jae 0x401d28
or al, 0xff
jmp 0x401d2a
mov al, 1
test al, al
jle 0x401db3
call dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
push 0
push 0x64
push edx
push eax
call fcn.0042f3b0
mov esi, eax
mov ecx, ebx
mov eax, dword [ebp - 0x24]
mov edi, edx
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
sbb ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov edx, ecx
mov ecx, eax
call fcn.0042f460
comisd xmm0, xmmword [0x435ab0]
jbe 0x401d79
add esi, 0xad160000
adc edi, 0x311cd
jmp 0x401d7f
add esi, dword [ebp - 0x34]
adc edi, dword [ebp - 0x38]
push 0
push 0x3b9aca00
push edi
push esi
call fcn.0042f220
mov dword [ebp - 0x20], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x1c], edx
sub esi, eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x18], esi
call dword [sym.imp.MSVCP140.dll__Thrd_sleep]
mov esi, dword [ebp - 0x24]
add esp, 4
jmp 0x401d00
cmp byte [0x438098], 0
jne 0x401af4
call fcn.004013a0
mov dword [ebp - 4], 4
mov ecx, dword [0x438414]
test ecx, ecx
je 0x401de6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x438414], 0
mov ecx, dword [0x43840c]
test ecx, ecx
je 0x401e00
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x43840c], 0
push dword [0x438410]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x43842c]
push dword [0x438440]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042e57b
mov esp, ebp
pop ebp
ret 0x10