Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0xa8
push 0
push 0x5586c8
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x5586cc], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x5586c8], eax
call fcn.0040efc0
call fcn.0040e525
call fcn.0040e310
call fcn.0040d630
call fcn.0040b761
call fcn.0040af10
call fcn.0040a4f1
call fcn.004093f8
call fcn.00409386
call fcn.00407af0
call fcn.00406ed9
call fcn.00406a2b
call fcn.00405b62
call fcn.00404d33
call fcn.00403eec
call fcn.0040368c
call fcn.00403478
call fcn.0040472c
call fcn.004043d0
call fcn.00408801
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
call fcn.0040749e
push 0x5586ec
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.Cheathappens
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.CheathappensWork
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
call fcn.0040749e
mov edx, str.CheathappensWork_
push edx
call fcn.0040f0e0
push 0x5586ec
call fcn.0040f050
mov dword [0x558734], 0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 2
mov eax, str..dll
push eax
push dword [0x5586ec]
call fcn.00407664
push 2
mov eax, str..tmp
push eax
push dword [0x5586ec]
call fcn.00407664
push 2
mov eax, str..txt
push eax
push dword [0x5586ec]
call fcn.00407664
call fcn.00401c7b
call fcn.0040208c
and eax, eax
je 0x401240
mov dword [0x558748], 0
jmp 0x40124a
mov dword [0x558748], 1
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.0040f140
mov eax, str.http:__www.cheathappens.com_inetcheck.txt
push eax
call fcn.00403082
add dword [esp + 4], edx
call fcn.004044f9
call fcn.004030a0
and eax, eax
je 0x40137c
push edx
call fcn.0040f010
pop edx
push eax
push 0x20000
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.0040f140
push 0xffffffff
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d20
call fcn.004030a0
mov dword [0x558750], eax
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x558750]
call fcn.00407e30
push 0x5586fc
call fcn.0040f050
push dword [0x5586fc]
mov edx, str.Cheathappens_Site_reached.
pop ecx
call fcn.004030b0
je 0x401329
mov dword [0x558754], 1
jmp 0x401333
mov dword [0x558754], 0
push dword [0x558750]
call fcn.00407a20
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push dword [0x5586e4]
call fcn.004020cd
mov dword [0x5586d8], eax
mov dword [0x558710], 1
mov dword [0x558714], 2
mov eax, 0x4622f2
push eax
push 0
call fcn.00403f5f
and eax, eax
je 0x4013ef
push 0x558710
push 0
mov ebp, 0x4890b2
mov ebx, ebp
mov ebp, 0x467752
sub ebx, ebp
push ebx
mov ebp, 0x467752
push ebp
mov eax, str.AddFontMemResourceEx
push eax
push 0
call fcn.00403fb9
push 0
call fcn.00403e9f
jmp 0x401405
mov eax, str.font_problem...
push eax
mov eax, str.E.R.R.O.R.
push eax
call fcn.004034e2
jmp 0x401f11
mov eax, 0x4622f2
push eax
push 0
call fcn.00403f5f
and eax, eax
je 0x401454
push 0x558714
push 0
mov ebp, 0x4a8b3e
mov ebx, ebp
mov ebp, 0x4890b2
sub ebx, ebp
push ebx
mov ebp, 0x4890b2
push ebp
mov eax, str.AddFontMemResourceEx
push eax
push 0
call fcn.00403fb9
push 0
call fcn.00403e9f
jmp 0x40146a
mov eax, str.font_problem...
push eax
mov eax, str.E.R.R.O.R.
push eax
call fcn.004034e2
jmp 0x401f11
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
push 0x558730
call fcn.0040f050
mov ebp, 0x4625f0
push ebp
push 0xffffffff
call fcn.00409509
mov dword [0x558764], eax
push 0x80000001
mov eax, 0x462070
push eax
push 0x6d
push 0x1db
push 0
push 0
push 0xffffffff
call fcn.00405bba
mov dword [0x5586f4], eax
push dword [0x558764]
call fcn.00409520
push eax
push 0x6d
push 0x1db
push 0
push 0
push 0xffffffff
call fcn.00405344
mov dword [0x5586e0], eax
push 0x10
push 0xd
mov eax, 0x462218
push eax
push 0xffffffff
call fcn.0040e572
mov dword [0x55873c], eax
push 0x10
push 0xe
mov eax, str.Century_Gothic_Bold
push eax
push 0xffffffff
call fcn.0040e572
mov dword [0x558704], eax
push 0x10
push 0xa
mov eax, 0x462218
push eax
push 0xffffffff
call fcn.0040e572
mov dword [0x558708], eax
push 0x302
mov eax, 0x46204a
push eax
push 0x1e
push 0x15e
push 0x4b
push 0x78
push 0xffffffff
call fcn.004054fa
mov dword [0x55874c], eax
push dword [0x55873c]
call fcn.0040e63b
push eax
push dword [0x55874c]
call fcn.004055ef
push 0
push 1
push dword [0x55874c]
call fcn.0040565e
push 0x3a
push 0xa7
mov eax, 0xf3
call fcn.00403050
push eax
push 2
push dword [0x55874c]
call fcn.0040565e
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push 0x23
mov eax, str.____________________________________customized_For:_maxurius
push eax
call fcn.0040d8e0
push 0x558740
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
mov eax, 0x462068
push eax
push dword [0x558740]
call fcn.0040d960
mov edx, 0x462060
push edx
call fcn.0040f0e0
push 0x558740
call fcn.0040f050
push dword [0x558740]
push dword [0x55874c]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x558748]
cmp ebx, 1
je 0x401668
mov ebx, dword [0x558754]
and ebx, ebx
je 0x401668
jmp 0x40166f
mov eax, 1
jmp 0x401671
xor eax, eax
and eax, eax
je 0x401689
mov ebx, dword [0x5586d8]
and ebx, ebx
jne 0x401689
mov dword [0x55872c], 1
push edx
call fcn.0040f010
pop edx
push eax
mov edx, 0x462592
push edx
call fcn.0040f0e0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
mov eax, dword [0x5586e4]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.0040da00
pop eax
mov edx, 0x462056
push edx
call fcn.0040f0e0
push 0x558760
call fcn.0040f050
mov ebx, dword [0x558748]
cmp ebx, 1
jne 0x401705
mov eax, str.No_Internet_Connection_Found.
push eax
push dword [0x55874c]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x558754]
and ebx, ebx
jne 0x40172a
mov eax, str.Cheathappens_Website_Offline.
push eax
push dword [0x55874c]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x5586d8]
cmp ebx, 1
jne 0x40177e
mov ebx, dword [0x558748]
cmp ebx, 1
je 0x40174c
mov ebx, dword [0x558754]
and ebx, ebx
je 0x40174c
jmp 0x401753
mov eax, 1
jmp 0x401755
xor eax, eax
and eax, eax
je 0x40177e
mov eax, str.Offline_Mode_Enabled.
push eax
push dword [0x55874c]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov dword [0x55876c], 1
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.0040f140
push dword [0x558760]
call fcn.00403082
add dword [esp + 4], edx
call fcn.004044f9
call fcn.004030a0
and eax, eax
je 0x401910
push edx
call fcn.0040f010
pop edx
push eax
push 0x20000
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.0040f140
push 0xffffffff
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d20
call fcn.004030a0
mov dword [0x558750], eax
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x558750]
call fcn.00407e30
push 0x5586fc
call fcn.0040f050
push dword [0x558750]
call fcn.00407a20
push dword [0x5586fc]
mov edx, str.User_Banned.
pop ecx
call fcn.004030b0
je 0x401906
mov dword [0x55876c], 0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 0
push 0
mov eax, 0xc8
call fcn.00403050
push eax
push 1
push dword [0x55874c]
call fcn.0040565e
push dword [0x558704]
call fcn.0040e63b
push eax
push dword [0x55874c]
call fcn.004055ef
mov eax, str.This_User_is_Banned.
push eax
push dword [0x55874c]
call fcn.00405689
push 0x7d0
call fcn.00405a09
jmp 0x401f11
mov dword [0x55876c], 1
mov ebx, dword [0x55872c]
cmp ebx, 1
jne 0x401952
push dword [0x558708]
call fcn.0040e63b
push eax
push dword [0x55874c]
call fcn.004055ef
mov eax, str.Download_an_offline_key_to_use_this_trainer_offline.
push eax
push dword [0x55874c]
call fcn.00405689
push 0xbb8
call fcn.00405a09
jmp 0x401f11
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
call fcn.004036bb
push 0x558724
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x558724]
call fcn.004079f6
push 0x558724
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
mov edx, str.CheathappensTrainer
push edx
call fcn.0040f0e0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push 0x2710
call fcn.00403db0
cdq
push edx
push eax
call fcn.0040da00
pop eax
mov edx, 0x46204c
push edx
call fcn.0040f0e0
push 0x558768
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push 0x60000
mov edx, dword [0x558730]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, dword [0x558768]
push edx
call fcn.0040f0e0
call fcn.0040f140
push 0
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d00
call fcn.004030a0
and eax, eax
je 0x401a62
mov ebp, 0x556b3e
mov ebx, ebp
mov ebp, 0x4a8b3e
sub ebx, ebp
push ebx
mov ebp, 0x4a8b3e
mov ebx, ebp
add ebx, dword [0x558700]
push ebx
push 0
call fcn.00407e50
push 0
call fcn.00407a20
jmp 0x401a62
mov ebx, dword [0x55876c]
neg ebx
inc ebx
mov dword [0x55876c], ebx
push dword [0x5586f4]
call fcn.00405a2a
mov eax, dword [0x558734]
cdq
push edx
push eax
mov eax, dword [0x55876c]
cdq
add dword [esp], eax
adc dword [esp + 4], edx
mov eax, dword [0x55872c]
cdq
add dword [esp], eax
adc dword [esp + 4], edx
add dword [esp], 0xb516e34c
adc dword [esp + 4], 0xf3a
pop dword [0x5586d0]
pop dword [0x5586d4]
push edx
call fcn.0040f010
pop edx
push eax
mov edx, 0x46206c
push edx
call fcn.0040f0e0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x5586d4]
push dword [0x5586d0]
call fcn.0040da00
pop eax
mov edx, 0x462534
push edx
call fcn.0040f0e0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
call fcn.004036bb
pop eax
mov edx, 0x46206c
push edx
call fcn.0040f0e0
push 0x558738
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push 0
push 1
mov eax, 0x46204a
push eax
push dword [0x558738]
mov edx, dword [0x558730]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, dword [0x558768]
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.0040375a
call fcn.004030a0
push 0x64
call fcn.00405a09
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x558730]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, dword [0x558768]
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407656
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x5586ec]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 2
mov eax, str..dll
push eax
push dword [0x5586ec]
call fcn.00407664
push 2
mov eax, str..tmp
push eax
push dword [0x5586ec]
call fcn.00407664
push 2
mov eax, str..txt
push eax
push dword [0x5586ec]
call fcn.00407664
jmp 0x401f11
push 0
call 0x401f30
call fcn.0040eff0
push dword [0x5586c8]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00403ee0
call fcn.004046fc
call fcn.00404d18
call fcn.00405b3f
call fcn.00406a0d
call fcn.00407a08
call fcn.00407ae0
call fcn.004093ec
call fcn.0040a4e4
call fcn.0040d650
call fcn.0040e698
call fcn.0040e6e2
call fcn.0040e300
ret