Function at 0x401d00
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x436e60
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x440040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x44041c], 0x30
mov dword [0x440420], 0x40
mov dword [0x440424], 0x401000
mov dword [0x440428], 0
mov dword [0x44042c], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x440430], eax
push 0x44041c
movups xmmword [0x440434], xmm0
mov dword [0x440444], 0x438258
mov dword [0x440448], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x440430]
push 0
push 0
push 0x136
push 0x1cc
push 0x64
push 0x64
push 0x80000000
push str.Cheat_Menu
push str.class001
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x440414], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x440414]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x440410], ecx
test ecx, ecx
je 0x401e81
push 0x440418
push 0x44044c
push 0x40
push dword [0x440414]
xorps xmm0, xmm0
mov dword [0x440460], 0
push 1
movlpd qword [0x44044c], xmm0
movlpd qword [0x440458], xmm0
mov dword [0x440468], 0
movlpd qword [0x440478], xmm0
mov dword [0x44046c], 1
mov dword [0x440464], 1
mov dword [0x440454], 0
mov dword [0x440470], 1
mov dword [0x440474], 0x50
mov dword [0x440480], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.004012b0
cmp byte [0x440098], 0
je 0x402204
call fcn.00401980
mov dword [ebp - 4], 1
mov edx, 0x440098
mov eax, dword [0x440498]
mov ecx, str.Ecstasy
push 0x122
or dword [eax + 0x4954], 3
mov dword [eax + 0x4964], 0
mov dword [eax + 0x4968], 0
mov dword [eax + 0x496c], 0
mov dword [eax + 0x4970], 0
mov dword [eax + 0x4958], 1
mov dword [eax + 0x4974], 0x43e60000
mov dword [eax + 0x4978], 0x439b0000
mov dword [eax + 0x495c], 1
call fcn.0040e550
add esp, 4
call fcn.00432e20
test al, al
je 0x401fdf
push ecx
mov ecx, str.Player
call fcn.004347f0
add esp, 4
test al, al
je 0x401f93
mov edx, 0x440409
mov ecx, str.Flight
call fcn.00431870
mov edx, 0x440408
mov ecx, str.Makerpen
call fcn.00431870
mov edx, 0x44040a
mov ecx, str.Developer_Mode
call fcn.00431870
mov ecx, dword [0x440498]
mov edx, dword [ecx + 0x3f8c]
cmp byte [edx + 0xb3], 0
jne 0x401f93
mov ecx, dword [ecx + 0x4d30]
test ecx, ecx
je 0x401f93
movsx eax, word [ecx + 0x74]
imul eax, eax, 0x2c
add eax, dword [ecx + 8]
test byte [eax + 4], 8
jne 0x401f93
dec dword [edx + 0xec]
push ecx
mov ecx, str.Foodsploit
call fcn.004347f0
add esp, 4
test al, al
je 0x401fda
mov ecx, dword [0x440498]
mov edx, dword [ecx + 0x3f8c]
cmp byte [edx + 0xb3], 0
jne 0x401fda
mov ecx, dword [ecx + 0x4d30]
test ecx, ecx
je 0x401fda
movsx eax, word [ecx + 0x74]
imul eax, eax, 0x2c
add eax, dword [ecx + 8]
test byte [eax + 4], 8
jne 0x401fda
dec dword [edx + 0xec]
call fcn.00433300
call fcn.00410f30
mov dword [ebp - 4], 2
call fcn.0040b040
mov ecx, dword [0x440418]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x440418]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x440418]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x440418]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x440418]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x402091
call fcn.0040b410
mov eax, dword [0x440498]
xor ecx, ecx
mov eax, dword [eax + 0x4a34]
mov eax, dword [eax]
add eax, 0x3c
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042c750
mov eax, dword [0x440418]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x440418]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x4020c3
mov eax, dword [0x440418]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x4020c3
call fcn.004011e0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.00401be0
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
cmp esi, 0xffb3b4bf
jne 0x4020e8
cmp ebx, 0x7fffffff
je 0x40210f
cmp ebx, 0x7fffffff
jg 0x4020fe
jl 0x4020fa
cmp esi, 0xffb3b4bf
jae 0x4020fe
or al, 0xff
jmp 0x402100
mov al, 1
test al, al
jns 0x40210f
add esi, 0x4c4b40
adc ebx, 0
jmp 0x402117
or esi, 0xffffffff
mov ebx, 0x7fffffff
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], esi
nop dword [eax]
lea ecx, [ebp - 0x30]
call fcn.00401be0
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
cmp esi, edx
jne 0x40213a
cmp ebx, ecx
je 0x4021f7
cmp ebx, ecx
jg 0x402148
jl 0x402144
cmp esi, edx
jae 0x402148
or al, 0xff
jmp 0x40214a
mov al, 1
test al, al
jle 0x4021f7
mov edi, esi
mov esi, ebx
sub edi, edx
sbb esi, ecx
cmp edi, 0x914f0000
jne 0x40216a
cmp esi, 0x4e94
je 0x4021e5
cmp esi, 0x4e94
jg 0x4021e5
jl 0x40217c
cmp edi, 0x914f0000
jae 0x4021e5
push 0
push 0xf4240
push esi
push edi
call fcn.00436b00
push 0
mov ebx, eax
mov eax, edx
push 0xf4240
push eax
push ebx
mov dword [ebp - 0x14], eax
call fcn.00436c90
cmp eax, edi
jne 0x4021a7
cmp edx, esi
je 0x4021ce
cmp edx, esi
jg 0x4021ce
jl 0x4021b1
cmp eax, edi
jae 0x4021ce
mov eax, dword [ebp - 0x14]
add ebx, 1
push ebx
adc eax, 0
mov dword [ebp - 0x14], eax
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
jmp 0x402120
mov eax, dword [ebp - 0x14]
push ebx
mov dword [ebp - 0x14], eax
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
jmp 0x402120
push 0x5265c00
call sub.KERNEL32.dll_Sleep
mov esi, dword [ebp - 0x10]
jmp 0x402120
cmp byte [0x440098], 0
jne 0x401e93
call fcn.00401740
mov dword [ebp - 4], 3
mov ecx, dword [0x440418]
test ecx, ecx
je 0x40222a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x440418], 0
mov ecx, dword [0x440410]
test ecx, ecx
je 0x402244
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x440410], 0
push dword [0x440414]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x440430]
push dword [0x440444]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10