Function at 0x401230
Capabilities:
Hide graphical window
Set console window title
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x38
mov eax, dword [0x43806c]
xor eax, esp
mov dword [esp + 0x34], eax
push esi
push edi
push str._RAMXCHEAT.__n
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov edi, dword [sym.imp.KERNEL32.dll_Beep]
push 0x1f4
push 0x1f4
call edi
push str.Sat_Nov__9_11:13:02_2024
push str._n_s__n_n
call fcn.004010a0
add esp, 8
xor esi, esi
inc esi
push ecx
mov edx, esi
call fcn.004010d0
add esp, 4
cmp esi, 0x3e8
jl 0x401277
push 0x434df0
call fcn.00401060
add esp, 4
push str.___________________________________________________________________________________________________________________n
call fcn.004010a0
add esp, 4
push str.color_1
call fcn.00411f18
add esp, 4
push str.color_2
call fcn.00411f18
add esp, 4
push str.color_3
call fcn.00411f18
add esp, 4
push str.color_4
call fcn.00411f18
add esp, 4
push str.color_5
call fcn.00411f18
add esp, 4
push str.color_6
call fcn.00411f18
add esp, 4
push str.color_7
call fcn.00411f18
add esp, 4
push str.color_8
call fcn.00411f18
add esp, 4
push str.color_5
call fcn.00411f18
add esp, 4
push str.___RAMWINTERFELL_n
call fcn.00401060
add esp, 4
push str.color_1
call fcn.00411f18
add esp, 4
push str.color_2
call fcn.00411f18
add esp, 4
push str.color_3
call fcn.00411f18
add esp, 4
push str.color_4
call fcn.00411f18
add esp, 4
push str.color_5
call fcn.00411f18
add esp, 4
push str.color_6
call fcn.00411f18
add esp, 4
push str.color_7
call fcn.00411f18
add esp, 4
push str.color_8
call fcn.00411f18
add esp, 4
push str.color_5
call fcn.00411f18
add esp, 4
push str.___________________________________________________________________________________________________________________n
call fcn.004010a0
add esp, 4
push 0x1f4
push 0x1f4
call edi
push str.sc_stop_vgk_nul
call fcn.00411f18
add esp, 4
push 0x40
push str.RAMX_CHEAT
push str.PLEASE_ENTER_GAME__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push 0
call edi
push eax
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
call esi
call dword [sym.imp.KERNEL32.dll_FreeConsole]
push 0
call edi
push eax
call esi
mov ecx, 0xae
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x434f28]
xor al, cl
inc ecx
mov byte [esp + edx + 0x10], al
and ecx, 0x800000ff
jns 0x40141d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x1e
jl 0x401400
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea eax, [esp + 0x28]
mov byte [esp + 0x46], 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
xorps xmm0, xmm0
mov dword [esp + 0x28], 0
push 4
mov esi, eax
movaps xmmword [esp + 0x14], xmm0
movq qword [esp + 0x24], xmm0
mov word [esp + 0x30], 0
mov byte [esp + 0x32], 0
call fcn.0040a611
add esp, 4
push 0
push eax
push 0x231000
push 0x438ab0
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call edi
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push dword [0x6713fc]
mov dword [0x6713f8], 0xc
push 4
push eax
mov dword [0x671400], 0
call dword [sym.imp.ADVAPI32.dll_SetKernelObjectSecurity]
cmp dword [0x671404], 0
jne 0x4014ee
nop dword [eax + eax]
call fcn.00402a80
mov dword [0x671404], eax
test eax, eax
je 0x4014e0
call fcn.00401180
push ecx
call fcn.00402b60
add esp, 4
push 0
call edi
push eax
call esi
mov ecx, dword [esp + 0x3c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.0040a600
mov esp, ebp
pop ebp
ret