Function at 0x402b00
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x445aa0
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x44f040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x44f488], 0x30
mov dword [0x44f48c], 0x40
mov dword [0x44f490], 0x401000
mov dword [0x44f494], 0
mov dword [0x44f498], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x44f49c], eax
push 0x44f488
movups xmmword [0x44f4a0], xmm0
mov dword [0x44f4b0], 0x4473d0
mov dword [0x44f4b4], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x44f49c]
push 0
push 0
push 0x12c
push 0x1f4
push 0x64
push 0x64
push 0x80000000
push str.Cheat_Menu
push str.Cheat_Menu_Class
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x44f480], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x44f480]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x44f47c], ecx
test ecx, ecx
je 0x402c84
push 0x44f484
push 0x44f4b8
push 0x40
push dword [0x44f480]
xorps xmm0, xmm0
mov dword [0x44f4cc], 0
push 1
movlpd qword [0x44f4b8], xmm0
movlpd qword [0x44f4c4], xmm0
mov dword [0x44f4d4], 0
movlpd qword [0x44f4e4], xmm0
mov dword [0x44f4d8], 1
mov dword [0x44f4d0], 1
mov dword [0x44f4c0], 0
mov dword [0x44f4dc], 1
mov dword [0x44f4e0], 0x50
mov dword [0x44f4ec], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.00401280
cmp byte [0x44f098], 0
je 0x402e96
call fcn.004017b0
call fcn.00401a10
mov dword [ebp - 4], 1
call fcn.0040bc70
mov ecx, dword [0x44f484]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x44f484]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x44f484]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x44f484]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x44f484]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x402d4d
call fcn.0040c040
mov eax, dword [0x44f508]
xor ecx, ecx
mov eax, dword [eax + 0x4a38]
mov eax, dword [eax]
add eax, 0x38
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042ef50
mov eax, dword [0x44f484]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x44f484]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x402d7f
mov eax, dword [0x44f484]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x402d7f
call fcn.004011b0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.004029e0
mov esi, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x3c]
cmp esi, 0xff67697f
jne 0x402da4
cmp ebx, 0x7fffffff
je 0x402dcb
cmp ebx, 0x7fffffff
jg 0x402dba
jl 0x402db6
cmp esi, 0xff67697f
jae 0x402dba
or al, 0xff
jmp 0x402dbc
mov al, 1
test al, al
jns 0x402dcb
add esi, 0x989680
adc ebx, 0
jmp 0x402dd3
or esi, 0xffffffff
mov ebx, 0x7fffffff
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x30]
call fcn.004029e0
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
cmp esi, ecx
jne 0x402df0
cmp ebx, eax
je 0x402e89
cmp ebx, eax
jg 0x402dfe
jl 0x402dfa
cmp esi, ecx
jae 0x402dfe
or al, 0xff
jmp 0x402e00
mov al, 1
test al, al
jle 0x402e89
call dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
push 0
push 0x64
push edx
push eax
call fcn.00445790
mov esi, eax
mov ecx, ebx
mov eax, dword [ebp - 0x24]
mov edi, edx
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
sbb ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov edx, ecx
mov ecx, eax
call fcn.00445940
comisd xmm0, xmmword [0x44d218]
jbe 0x402e4f
add esi, 0xad160000
adc edi, 0x311cd
jmp 0x402e55
add esi, dword [ebp - 0x34]
adc edi, dword [ebp - 0x38]
push 0
push 0x3b9aca00
push edi
push esi
call fcn.00445600
mov dword [ebp - 0x20], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x1c], edx
sub esi, eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x18], esi
call dword [sym.imp.MSVCP140.dll__Thrd_sleep]
mov esi, dword [ebp - 0x24]
add esp, 4
jmp 0x402dd6
cmp byte [0x44f098], 0
jne 0x402c96
call fcn.00401570
mov dword [ebp - 4], 2
mov ecx, dword [0x44f484]
test ecx, ecx
je 0x402ebc
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44f484], 0
mov ecx, dword [0x44f47c]
test ecx, ecx
je 0x402ed6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x44f47c], 0
push dword [0x44f480]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x44f49c]
push dword [0x44f4b0]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044495b
mov esp, ebp
pop ebp
ret 0x10