Function at 0x402e50
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4376f0
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x47500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x475610], 0x30
mov dword [0x475614], 0x40
mov dword [0x475618], 0x401190
mov dword [0x47561c], 0
mov dword [0x475620], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x475624], eax
push 0x475610
movups xmmword [0x475628], xmm0
mov dword [0x475638], 0x4383a8
mov dword [0x47563c], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x475624]
push 0
push 0
push 0x12c
push 0x1f4
push 0x64
push 0x64
push 0x80000000
push str.Cheat_Menu
push str.class001
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x475608], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x475608]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x475604], ecx
test ecx, ecx
je 0x402fd4
push 0x47560c
push 0x475640
push 0x40
push dword [0x475608]
xorps xmm0, xmm0
mov dword [0x475654], 0
push 1
movlpd qword [0x475640], xmm0
movlpd qword [0x47564c], xmm0
mov dword [0x47565c], 0
movlpd qword [0x47566c], xmm0
mov dword [0x475660], 1
mov dword [0x475658], 1
mov dword [0x475648], 0
mov dword [0x475664], 1
mov dword [0x475668], 0x50
mov dword [0x475674], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.00401440
cmp byte [0x475028], 0
je 0x403349
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
mov edi, dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 1
push eax
call ebx
test eax, eax
je 0x403035
lea eax, [ebp - 0x3c]
push eax
call esi
lea eax, [ebp - 0x3c]
push eax
call edi
cmp dword [ebp - 0x38], 0x12
je 0x403046
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call ebx
test eax, eax
jne 0x403011
mov eax, dword [0x4756b0]
test eax, eax
je 0x403056
mov ecx, dword [eax + 0xc8]
jmp 0x403058
cmp byte [0x475028], 0
sete byte [0x475028]
jmp 0x403080
xor ecx, ecx
cmp dword [ecx + 0xc], 0
jne 0x403076
test eax, eax
je 0x403076
mov eax, dword [eax + 0xc8]
test eax, eax
je 0x403076
cmp dword [eax], 0
je 0x403076
call fcn.00427940
call fcn.00427ec0
call fcn.004082e0
call fcn.00401730
mov dword [ebp - 4], 2
call fcn.0040a750
mov ecx, dword [0x47560c]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x47560c]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x47560c]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x47560c]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x47560c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x403132
call fcn.0040aab0
mov eax, dword [0x4756b0]
xor ecx, ecx
mov eax, dword [eax + 0x1d4c]
mov eax, dword [eax]
add eax, 0x34
cmp byte [eax], cl
cmovne ecx, eax
call fcn.00427420
mov eax, dword [0x47560c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x47560c]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x403164
mov eax, dword [0x47560c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x403164
call fcn.00401370
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov ebx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], ebx
call dword [sym.imp.MSVCP140.dll__Query_perf_counter]
push ebx
push dword [ebp - 0x40]
mov esi, edx
mov edi, eax
push esi
push edi
call fcn.00437160
push 0
push 0x3b9aca00
push edx
push eax
call fcn.00437210
push dword [ebp - 0x44]
mov ebx, eax
mov dword [ebp - 0x4c], edx
push dword [ebp - 0x40]
push esi
push edi
call fcn.00437280
push 0
push 0x3b9aca00
push edx
push eax
call fcn.00437210
push dword [ebp - 0x44]
push dword [ebp - 0x40]
push edx
push eax
call fcn.00437160
mov esi, eax
mov ecx, edx
add esi, ebx
adc ecx, dword [ebp - 0x4c]
cmp esi, 0xffb3b4bf
jne 0x4031e2
cmp ecx, 0x7fffffff
je 0x40320f
cmp ecx, 0x7fffffff
jg 0x4031f8
jl 0x4031f4
cmp esi, 0xffb3b4bf
jae 0x4031f8
or al, 0xff
jmp 0x4031fa
mov al, 1
test al, al
jns 0x40320f
add esi, 0x4c4b40
mov dword [ebp - 0x4c], esi
adc ecx, 0
mov dword [ebp - 0x44], ecx
jmp 0x403220
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x44], 0x7fffffff
nop dword [eax]
call dword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov ebx, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], ebx
call dword [sym.imp.MSVCP140.dll__Query_perf_counter]
push ebx
push dword [ebp - 0x40]
mov esi, edx
mov edi, eax
push esi
push edi
call fcn.00437160
push 0
push 0x3b9aca00
push edx
push eax
call fcn.00437210
push dword [ebp - 0x48]
mov ebx, eax
mov dword [ebp - 0x50], edx
push dword [ebp - 0x40]
push esi
push edi
call fcn.00437280
push 0
push 0x3b9aca00
push edx
push eax
call fcn.00437210
push dword [ebp - 0x48]
push dword [ebp - 0x40]
push edx
push eax
call fcn.00437160
mov edi, dword [ebp - 0x4c]
mov ecx, eax
add ecx, ebx
mov eax, edx
mov ebx, dword [ebp - 0x44]
adc eax, dword [ebp - 0x50]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x50], eax
cmp edi, ecx
jne 0x40329f
cmp ebx, eax
je 0x40332a
cmp ebx, eax
jg 0x4032ad
jl 0x4032a9
cmp edi, ecx
jae 0x4032ad
or al, 0xff
jmp 0x4032af
mov al, 1
test al, al
jle 0x40332a
call dword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
push 0
push 0x64
push edx
push eax
call fcn.00437210
sub edi, dword [ebp - 0x40]
mov esi, eax
mov dword [ebp - 0x48], edx
mov ecx, edi
sbb ebx, dword [ebp - 0x50]
mov edx, ebx
call fcn.004374c0
comisd xmm0, xmmword [0x472a38]
jbe 0x4032f2
mov eax, dword [ebp - 0x48]
add esi, 0xad160000
adc eax, 0x311cd
jmp 0x4032f9
add esi, edi
adc ebx, dword [ebp - 0x48]
mov eax, ebx
push 0
push 0x3b9aca00
push eax
push esi
call fcn.00437160
mov dword [ebp - 0x20], eax
imul eax, eax, 0x3b9aca00
mov dword [ebp - 0x1c], edx
sub esi, eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x18], esi
call dword [sym.imp.MSVCP140.dll__Thrd_sleep]
add esp, 4
jmp 0x403220
cmp byte [0x475028], 0
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov esi, dword [sym.imp.USER32.dll_TranslateMessage]
mov edi, dword [sym.imp.USER32.dll_DispatchMessageA]
jne 0x402ff8
mov dword [ebp - 4], 3
mov ecx, dword [0x4756b0]
test ecx, ecx
je 0x403362
mov edi, dword [ecx + 0xc8]
jmp 0x403364
xor edi, edi
lea ebx, [ecx + 8]
test ecx, ecx
je 0x4033d5
mov esi, dword [ecx + 0xc8]
test esi, esi
je 0x4033d5
cmp dword [esi], 0
je 0x4033d5
mov edx, dword [esi + 4]
test edx, edx
je 0x403394
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4756b0]
mov dword [esi + 4], 0
mov edx, dword [esi + 8]
test edx, edx
je 0x4033ae
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4756b0]
mov dword [esi + 8], 0
mov edx, dword [esi + 0xc]
test edx, edx
je 0x4033d5
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4756b0]
mov dword [esi + 0xc], 0
mov eax, dword [ecx + 0x98]
mov dword [eax + 4], 0
mov edx, dword [edi]
test edx, edx
je 0x4033e7
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4756b0]
mov dword [ebx + 0xb8], 0
mov dword [ebx + 0xc0], 0
test ecx, ecx
je 0x403405
dec dword [ecx + 0x36c]
push dword [0x4756a8]
push edi
call fcn.00404c60
mov eax, dword [0x4756b0]
add esp, 8
test eax, eax
je 0x403425
mov esi, dword [eax + 0xc4]
jmp 0x403427
xor esi, esi
mov ecx, dword [esi + 0x28]
lea edi, [eax + 8]
test ecx, ecx
je 0x40343d
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x4756b0]
mov dword [edi + 0xb4], 0
mov dword [edi + 0xbc], 0
test eax, eax
je 0x40345b
dec dword [eax + 0x36c]
push dword [0x4756a8]
push esi
call fcn.00404c60
mov esi, dword [0x4756b0]
add esp, 8
mov ecx, esi
call fcn.00409a10
mov eax, dword [0x4756b0]
xor ecx, ecx
cmp eax, esi
cmove eax, ecx
mov dword [0x4756b0], eax
test esi, esi
je 0x4034b1
mov ecx, esi
call fcn.00417ca0
mov eax, dword [0x4756b0]
test eax, eax
je 0x4034a2
dec dword [eax + 0x36c]
push dword [0x4756a8]
push esi
call fcn.00404c60
add esp, 8
mov dword [ebp - 4], 4
mov ecx, dword [0x47560c]
test ecx, ecx
je 0x4034d2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x47560c], 0
mov ecx, dword [0x475604]
test ecx, ecx
je 0x4034ec
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x475604], 0
push dword [0x475608]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x475624]
push dword [0x475638]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00436094
mov esp, ebp
pop ebp
ret 0x10