Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0xa8
push 0
push 0x5da350
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x5da354], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x5da350], eax
call fcn.0040efe0
call fcn.0040e545
call fcn.0040e330
call fcn.0040d650
call fcn.0040b781
call fcn.0040af30
call fcn.0040a511
call fcn.00409418
call fcn.004093a6
call fcn.00407af0
call fcn.00406ed9
call fcn.00406a2b
call fcn.00405b62
call fcn.00404d33
call fcn.00403eec
call fcn.0040368c
call fcn.00403478
call fcn.0040472c
call fcn.004043d0
call fcn.00408821
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
call fcn.0040749e
push 0x5da374
call fcn.0040f070
push edx
call fcn.0040f030
pop edx
push eax
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.Cheathappens
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f030
pop edx
push eax
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.CheathappensWork
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f030
pop edx
push eax
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.CheathappensWorkRuntime
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f030
pop edx
push eax
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.CheathappensWorkRuntimeVersion
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
call fcn.0040749e
mov edx, str.CheathappensWorkRuntime_
push edx
call fcn.0040f100
push 0x5da374
call fcn.0040f070
mov dword [0x5da3bc], 0
push edx
call fcn.0040f030
pop edx
push eax
push 2
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.cheathappens.net
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push edx
call fcn.0040f030
pop edx
push eax
push 2
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.inetcheck.dat
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 2
mov eax, str..dll
push eax
push dword [0x5da374]
call fcn.00407664
push 2
mov eax, str..tmp
push eax
push dword [0x5da374]
call fcn.00407664
push 2
mov eax, str..txt
push eax
push dword [0x5da374]
call fcn.00407664
call fcn.00401ced
call fcn.004020fe
and eax, eax
je 0x4012b2
mov dword [0x5da3d0], 0
jmp 0x4012bc
mov dword [0x5da3d0], 1
push edx
call fcn.0040f030
pop edx
push eax
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.inetcheck.dat
push edx
call fcn.0040f100
call fcn.0040f160
mov eax, str.http:__www.cheathappens.com_inetcheck.txt
push eax
call fcn.00403082
add dword [esp + 4], edx
call fcn.004044f9
call fcn.004030a0
and eax, eax
je 0x4013ee
push edx
call fcn.0040f030
pop edx
push eax
push 0x20000
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.inetcheck.dat
push edx
call fcn.0040f100
call fcn.0040f160
push 0xffffffff
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d20
call fcn.004030a0
mov dword [0x5da3d8], eax
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
push dword [0x5da3d8]
call fcn.00407e50
push 0x5da384
call fcn.0040f070
push dword [0x5da384]
mov edx, str.Cheathappens_Site_reached.
pop ecx
call fcn.004030b0
je 0x40139b
mov dword [0x5da3dc], 1
jmp 0x4013a5
mov dword [0x5da3dc], 0
push dword [0x5da3d8]
call fcn.00407a20
push edx
call fcn.0040f030
pop edx
push eax
push 2
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.inetcheck.dat
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push dword [0x5da36c]
call fcn.0040213f
mov dword [0x5da360], eax
mov dword [0x5da398], 1
mov dword [0x5da39c], 2
mov eax, 0x4622f2
push eax
push 0
call fcn.00403f5f
and eax, eax
je 0x401461
push 0x5da398
push 0
mov ebp, 0x48913a
mov ebx, ebp
mov ebp, 0x4677da
sub ebx, ebp
push ebx
mov ebp, 0x4677da
push ebp
mov eax, str.AddFontMemResourceEx
push eax
push 0
call fcn.00403fb9
push 0
call fcn.00403e9f
jmp 0x401477
mov eax, str.font_problem...
push eax
mov eax, str.E.R.R.O.R.
push eax
call fcn.004034e2
jmp 0x401f83
mov eax, 0x4622f2
push eax
push 0
call fcn.00403f5f
and eax, eax
je 0x4014c6
push 0x5da39c
push 0
mov ebp, 0x4a8bc6
mov ebx, ebp
mov ebp, 0x48913a
sub ebx, ebp
push ebx
mov ebp, 0x48913a
push ebp
mov eax, str.AddFontMemResourceEx
push eax
push 0
call fcn.00403fb9
push 0
call fcn.00403e9f
jmp 0x4014dc
mov eax, str.font_problem...
push eax
mov eax, str.E.R.R.O.R.
push eax
call fcn.004034e2
jmp 0x401f83
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
push 0x5da3b8
call fcn.0040f070
mov ebp, 0x462678
push ebp
push 0xffffffff
call fcn.00409529
mov dword [0x5da3ec], eax
push 0x80000001
mov eax, 0x462070
push eax
push 0x6d
push 0x1db
push 0
push 0
push 0xffffffff
call fcn.00405bba
mov dword [0x5da37c], eax
push dword [0x5da3ec]
call fcn.00409540
push eax
push 0x6d
push 0x1db
push 0
push 0
push 0xffffffff
call fcn.00405344
mov dword [0x5da368], eax
push 0x10
push 0xd
mov eax, 0x462218
push eax
push 0xffffffff
call fcn.0040e592
mov dword [0x5da3c4], eax
push 0x10
push 0xe
mov eax, str.Century_Gothic_Bold
push eax
push 0xffffffff
call fcn.0040e592
mov dword [0x5da38c], eax
push 0x10
push 0xa
mov eax, 0x462218
push eax
push 0xffffffff
call fcn.0040e592
mov dword [0x5da390], eax
push 0x302
mov eax, 0x46204a
push eax
push 0x1e
push 0x15e
push 0x4b
push 0x78
push 0xffffffff
call fcn.004054fa
mov dword [0x5da3d4], eax
push dword [0x5da3c4]
call fcn.0040e65b
push eax
push dword [0x5da3d4]
call fcn.004055ef
push 0
push 1
push dword [0x5da3d4]
call fcn.0040565e
push 0x3a
push 0xa7
mov eax, 0xf3
call fcn.00403050
push eax
push 2
push dword [0x5da3d4]
call fcn.0040565e
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
push 0x23
mov eax, str._____________________________________customized_For:_Neortic
push eax
call fcn.0040d900
push 0x5da3c8
call fcn.0040f070
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
mov eax, 0x462068
push eax
push dword [0x5da3c8]
call fcn.0040d980
mov edx, 0x462060
push edx
call fcn.0040f100
push 0x5da3c8
call fcn.0040f070
push dword [0x5da3c8]
push dword [0x5da3d4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x5da3d0]
cmp ebx, 1
je 0x4016da
mov ebx, dword [0x5da3dc]
and ebx, ebx
je 0x4016da
jmp 0x4016e1
mov eax, 1
jmp 0x4016e3
xor eax, eax
and eax, eax
je 0x4016fb
mov ebx, dword [0x5da360]
and ebx, ebx
jne 0x4016fb
mov dword [0x5da3b4], 1
push edx
call fcn.0040f030
pop edx
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
push edx
call fcn.0040f100
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
mov eax, dword [0x5da36c]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.0040da20
pop eax
mov edx, str..zip
push edx
call fcn.0040f100
push 0x5da3e8
call fcn.0040f070
mov ebx, dword [0x5da3d0]
cmp ebx, 1
jne 0x401777
mov eax, str.No_Internet_Connection_Found.
push eax
push dword [0x5da3d4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x5da3dc]
and ebx, ebx
jne 0x40179c
mov eax, str.Cheathappens_Website_Offline.
push eax
push dword [0x5da3d4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x5da360]
cmp ebx, 1
jne 0x4017f0
mov ebx, dword [0x5da3d0]
cmp ebx, 1
je 0x4017be
mov ebx, dword [0x5da3dc]
and ebx, ebx
je 0x4017be
jmp 0x4017c5
mov eax, 1
jmp 0x4017c7
xor eax, eax
and eax, eax
je 0x4017f0
mov eax, str.Offline_Mode_Enabled.
push eax
push dword [0x5da3d4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov dword [0x5da3f4], 1
push edx
call fcn.0040f030
pop edx
push eax
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.cheathappens.net
push edx
call fcn.0040f100
call fcn.0040f160
push dword [0x5da3e8]
call fcn.00403082
add dword [esp + 4], edx
call fcn.004044f9
call fcn.004030a0
and eax, eax
je 0x401982
push edx
call fcn.0040f030
pop edx
push eax
push 0x20000
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.cheathappens.net
push edx
call fcn.0040f100
call fcn.0040f160
push 0xffffffff
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d20
call fcn.004030a0
mov dword [0x5da3d8], eax
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
push dword [0x5da3d8]
call fcn.00407e50
push 0x5da384
call fcn.0040f070
push dword [0x5da3d8]
call fcn.00407a20
push dword [0x5da384]
mov edx, str.User_Banned.
pop ecx
call fcn.004030b0
je 0x401978
mov dword [0x5da3f4], 0
push edx
call fcn.0040f030
pop edx
push eax
push 2
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.cheathappens.net
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 0
push 0
mov eax, 0xc8
call fcn.00403050
push eax
push 1
push dword [0x5da3d4]
call fcn.0040565e
push dword [0x5da38c]
call fcn.0040e65b
push eax
push dword [0x5da3d4]
call fcn.004055ef
mov eax, str.This_User_is_Banned.
push eax
push dword [0x5da3d4]
call fcn.00405689
push 0x7d0
call fcn.00405a09
jmp 0x401f83
mov dword [0x5da3f4], 1
mov ebx, dword [0x5da3b4]
cmp ebx, 1
jne 0x4019c4
push dword [0x5da390]
call fcn.0040e65b
push eax
push dword [0x5da3d4]
call fcn.004055ef
mov eax, str.Download_an_offline_key_to_use_this_trainer_offline.
push eax
push dword [0x5da3d4]
call fcn.00405689
push 0xbb8
call fcn.00405a09
jmp 0x401f83
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
call fcn.004036bb
push 0x5da3ac
call fcn.0040f070
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
push dword [0x5da3ac]
call fcn.004079f6
push 0x5da3ac
call fcn.0040f070
push edx
call fcn.0040f030
pop edx
push eax
mov edx, str.CheathappensTrainer
push edx
call fcn.0040f100
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
push 0x2710
call fcn.00403db0
cdq
push edx
push eax
call fcn.0040da20
pop eax
mov edx, 0x46204c
push edx
call fcn.0040f100
push 0x5da3f0
call fcn.0040f070
push edx
call fcn.0040f030
pop edx
push eax
push 0x60000
mov edx, dword [0x5da3b8]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, dword [0x5da3f0]
push edx
call fcn.0040f100
call fcn.0040f160
push 0
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d00
call fcn.004030a0
and eax, eax
je 0x401ad4
mov ebp, 0x5d87c6
mov ebx, ebp
mov ebp, 0x4a8bc6
sub ebx, ebp
push ebx
mov ebp, 0x4a8bc6
mov ebx, ebp
add ebx, dword [0x5da388]
push ebx
push 0
call fcn.00407e70
push 0
call fcn.00407a20
jmp 0x401ad4
mov ebx, dword [0x5da3f4]
neg ebx
inc ebx
mov dword [0x5da3f4], ebx
push dword [0x5da37c]
call fcn.00405a2a
mov eax, dword [0x5da3bc]
cdq
push edx
push eax
mov eax, dword [0x5da3f4]
cdq
add dword [esp], eax
adc dword [esp + 4], edx
mov eax, dword [0x5da3b4]
cdq
add dword [esp], eax
adc dword [esp + 4], edx
add dword [esp], 0xb516e34c
adc dword [esp + 4], 0xf3a
pop dword [0x5da358]
pop dword [0x5da35c]
push edx
call fcn.0040f030
pop edx
push eax
mov edx, 0x46206c
push edx
call fcn.0040f100
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
push dword [0x5da35c]
push dword [0x5da358]
call fcn.0040da20
pop eax
mov edx, 0x46250e
push edx
call fcn.0040f100
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f030
pop edx
push eax
call fcn.004036bb
pop eax
mov edx, 0x46206c
push edx
call fcn.0040f100
push 0x5da3c0
call fcn.0040f070
push edx
call fcn.0040f030
pop edx
push eax
push 0
push 1
mov eax, 0x46204a
push eax
push dword [0x5da3c0]
mov edx, dword [0x5da3b8]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, dword [0x5da3f0]
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.0040375a
call fcn.004030a0
push 0x64
call fcn.00405a09
push edx
call fcn.0040f030
pop edx
push eax
mov edx, dword [0x5da3b8]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, dword [0x5da3f0]
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.00407656
call fcn.004030a0
push edx
call fcn.0040f030
pop edx
push eax
push 2
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.cheathappens.net
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push edx
call fcn.0040f030
pop edx
push eax
push 2
mov edx, dword [0x5da374]
push edx
call fcn.0040f030
pop edx
push eax
push edx
call fcn.0040f100
mov edx, str.inetcheck.dat
push edx
call fcn.0040f100
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 2
mov eax, str..dll
push eax
push dword [0x5da374]
call fcn.00407664
push 2
mov eax, str..tmp
push eax
push dword [0x5da374]
call fcn.00407664
push 2
mov eax, str..txt
push eax
push dword [0x5da374]
call fcn.00407664
jmp 0x401f83
push 0
call 0x401fa2
call fcn.0040f010
push dword [0x5da350]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00403ee0
call fcn.004046fc
call fcn.00404d18
call fcn.00405b3f
call fcn.00406a0d
call fcn.00407a08
call fcn.00407ae0
call fcn.0040940c
call fcn.0040a504
call fcn.0040d670
call fcn.0040e6b8
call fcn.0040e702
call fcn.0040e320
ret