Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0xa8
push 0
push 0x9f7720
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x9f7724], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x9f7720], eax
call fcn.0040efc0
call fcn.0040e525
call fcn.0040e310
call fcn.0040d630
call fcn.0040b761
call fcn.0040af10
call fcn.0040a4f1
call fcn.004093f8
call fcn.00409386
call fcn.00407af0
call fcn.00406ed9
call fcn.00406a2b
call fcn.00405b62
call fcn.00404d33
call fcn.00403eec
call fcn.0040368c
call fcn.00403478
call fcn.0040472c
call fcn.004043d0
call fcn.00408801
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
call fcn.0040749e
push 0x9f7744
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.Cheathappens
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.CheathappensWork
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.CheathappensWorkRuntime
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.CheathappensWorkRuntimeVersion
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.004075a8
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
call fcn.0040749e
mov edx, str.CheathappensWorkRuntime_
push edx
call fcn.0040f0e0
push 0x9f7744
call fcn.0040f050
mov dword [0x9f778c], 0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 2
mov eax, str..dll
push eax
push dword [0x9f7744]
call fcn.00407664
push 2
mov eax, str..tmp
push eax
push dword [0x9f7744]
call fcn.00407664
push 2
mov eax, str..txt
push eax
push dword [0x9f7744]
call fcn.00407664
call fcn.00401ccc
call fcn.004020dd
and eax, eax
je 0x4012b2
mov dword [0x9f77a0], 0
jmp 0x4012bc
mov dword [0x9f77a0], 1
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.0040f140
mov eax, str.http:__www.cheathappens.com_inetcheck.txt
push eax
call fcn.00403082
add dword [esp + 4], edx
call fcn.004044f9
call fcn.004030a0
and eax, eax
je 0x4013ee
push edx
call fcn.0040f010
pop edx
push eax
push 0x20000
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.0040f140
push 0xffffffff
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d20
call fcn.004030a0
mov dword [0x9f77a8], eax
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x9f77a8]
call fcn.00407e30
push 0x9f7754
call fcn.0040f050
push dword [0x9f7754]
mov edx, str.Cheathappens_Site_reached.
pop ecx
call fcn.004030b0
je 0x40139b
mov dword [0x9f77ac], 1
jmp 0x4013a5
mov dword [0x9f77ac], 0
push dword [0x9f77a8]
call fcn.00407a20
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push dword [0x9f773c]
call fcn.0040211e
mov dword [0x9f7730], eax
mov dword [0x9f7768], 1
mov dword [0x9f776c], 2
mov eax, 0x4622f2
push eax
push 0
call fcn.00403f5f
and eax, eax
je 0x401461
push 0x9f7768
push 0
mov ebp, 0x488da8
mov ebx, ebp
mov ebp, 0x467448
sub ebx, ebp
push ebx
mov ebp, 0x467448
push ebp
mov eax, str.AddFontMemResourceEx
push eax
push 0
call fcn.00403fb9
push 0
call fcn.00403e9f
jmp 0x401477
mov eax, str.font_problem...
push eax
mov eax, str.E.R.R.O.R.
push eax
call fcn.004034e2
jmp 0x401f62
mov eax, 0x4622f2
push eax
push 0
call fcn.00403f5f
and eax, eax
je 0x4014c6
push 0x9f776c
push 0
mov ebp, 0x4a8834
mov ebx, ebp
mov ebp, 0x488da8
sub ebx, ebp
push ebx
mov ebp, 0x488da8
push ebp
mov eax, str.AddFontMemResourceEx
push eax
push 0
call fcn.00403fb9
push 0
call fcn.00403e9f
jmp 0x4014dc
mov eax, str.font_problem...
push eax
mov eax, str.E.R.R.O.R.
push eax
call fcn.004034e2
jmp 0x401f62
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
push 0x9f7788
call fcn.0040f050
mov ebp, 0x4626a0
push ebp
push 0xffffffff
call fcn.00409509
mov dword [0x9f77bc], eax
push 0x80000001
mov eax, 0x462070
push eax
push 0x6d
push 0x1db
push 0
push 0
push 0xffffffff
call fcn.00405bba
mov dword [0x9f774c], eax
push dword [0x9f77bc]
call fcn.00409520
push eax
push 0x6d
push 0x1db
push 0
push 0
push 0xffffffff
call fcn.00405344
mov dword [0x9f7738], eax
push 0x10
push 0xd
mov eax, 0x462218
push eax
push 0xffffffff
call fcn.0040e572
mov dword [0x9f7794], eax
push 0x10
push 0xe
mov eax, str.Century_Gothic_Bold
push eax
push 0xffffffff
call fcn.0040e572
mov dword [0x9f775c], eax
push 0x10
push 0xa
mov eax, 0x462218
push eax
push 0xffffffff
call fcn.0040e572
mov dword [0x9f7760], eax
push 0x302
mov eax, 0x46204a
push eax
push 0x1e
push 0x15e
push 0x4b
push 0x78
push 0xffffffff
call fcn.004054fa
mov dword [0x9f77a4], eax
push dword [0x9f7794]
call fcn.0040e63b
push eax
push dword [0x9f77a4]
call fcn.004055ef
push 0
push 1
push dword [0x9f77a4]
call fcn.0040565e
push 0xb0
push 0xa4
mov eax, 0x9d
call fcn.00403050
push eax
push 2
push dword [0x9f77a4]
call fcn.0040565e
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push 0x23
mov eax, str.________________________________________customized_For:_koog
push eax
call fcn.0040d8e0
push 0x9f7798
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
mov eax, 0x462068
push eax
push dword [0x9f7798]
call fcn.0040d960
mov edx, 0x462060
push edx
call fcn.0040f0e0
push 0x9f7798
call fcn.0040f050
push dword [0x9f7798]
push dword [0x9f77a4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x9f77a0]
cmp ebx, 1
je 0x4016da
mov ebx, dword [0x9f77ac]
and ebx, ebx
je 0x4016da
jmp 0x4016e1
mov eax, 1
jmp 0x4016e3
xor eax, eax
and eax, eax
je 0x4016fb
mov ebx, dword [0x9f7730]
and ebx, ebx
jne 0x4016fb
mov dword [0x9f7784], 1
push edx
call fcn.0040f010
pop edx
push eax
mov edx, str.http:__www.cheathappens.com_unauthorized_
push edx
call fcn.0040f0e0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
mov eax, dword [0x9f773c]
cdq
push edx
push eax
xor dword [esp], 0x7b3d89b
xor dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.0040da00
pop eax
mov edx, str..zip
push edx
call fcn.0040f0e0
push 0x9f77b8
call fcn.0040f050
mov ebx, dword [0x9f77a0]
cmp ebx, 1
jne 0x401777
mov eax, str.No_Internet_Connection_Found.
push eax
push dword [0x9f77a4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x9f77ac]
and ebx, ebx
jne 0x40179c
mov eax, str.Cheathappens_Website_Offline.
push eax
push dword [0x9f77a4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov ebx, dword [0x9f7730]
cmp ebx, 1
jne 0x4017f0
mov ebx, dword [0x9f77a0]
cmp ebx, 1
je 0x4017be
mov ebx, dword [0x9f77ac]
and ebx, ebx
je 0x4017be
jmp 0x4017c5
mov eax, 1
jmp 0x4017c7
xor eax, eax
and eax, eax
je 0x4017f0
mov eax, str.Offline_Mode_Enabled.
push eax
push dword [0x9f77a4]
call fcn.00405689
push 0x5dc
call fcn.00405a09
mov dword [0x9f77c4], 1
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.0040f140
push dword [0x9f77b8]
call fcn.00403082
add dword [esp + 4], edx
call fcn.004044f9
call fcn.004030a0
and eax, eax
je 0x401982
push edx
call fcn.0040f010
pop edx
push eax
push 0x20000
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.0040f140
push 0xffffffff
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d20
call fcn.004030a0
mov dword [0x9f77a8], eax
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x9f77a8]
call fcn.00407e30
push 0x9f7754
call fcn.0040f050
push dword [0x9f77a8]
call fcn.00407a20
push dword [0x9f7754]
mov edx, str.User_Banned.
pop ecx
call fcn.004030b0
je 0x401978
mov dword [0x9f77c4], 0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 0
push 0
mov eax, 0xc8
call fcn.00403050
push eax
push 1
push dword [0x9f77a4]
call fcn.0040565e
push dword [0x9f775c]
call fcn.0040e63b
push eax
push dword [0x9f77a4]
call fcn.004055ef
mov eax, str.This_Trainer_has_Expired_or_User_is_Banned.
push eax
push dword [0x9f77a4]
call fcn.00405689
push 0x7d0
call fcn.00405a09
jmp 0x401f62
mov dword [0x9f77c4], 1
mov ebx, dword [0x9f7784]
cmp ebx, 1
jne 0x4019c4
push dword [0x9f7760]
call fcn.0040e63b
push eax
push dword [0x9f77a4]
call fcn.004055ef
mov eax, str.Download_an_offline_key_to_use_this_trainer_offline.
push eax
push dword [0x9f77a4]
call fcn.00405689
push 0xbb8
call fcn.00405a09
jmp 0x401f62
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
call fcn.004036bb
push 0x9f777c
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x9f777c]
call fcn.004079f6
push 0x9f777c
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
mov edx, str.CheathappensTrainer
push edx
call fcn.0040f0e0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push 0x2710
call fcn.00403db0
cdq
push edx
push eax
call fcn.0040da00
pop eax
mov edx, 0x46204c
push edx
call fcn.0040f0e0
push 0x9f77c0
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push 0x60000
mov edx, dword [0x9f7788]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, dword [0x9f77c0]
push edx
call fcn.0040f0e0
call fcn.0040f140
push 0
call fcn.00403082
add dword [esp + 4], edx
call fcn.00407d00
call fcn.004030a0
and eax, eax
je 0x401ad4
mov ebp, 0x9f5b98
mov ebx, ebp
mov ebp, 0x4a8834
sub ebx, ebp
push ebx
mov ebp, 0x4a8834
mov ebx, ebp
add ebx, dword [0x9f7758]
push ebx
push 0
call fcn.00407e50
push 0
call fcn.00407a20
jmp 0x401ad4
mov ebx, dword [0x9f77c4]
neg ebx
inc ebx
mov dword [0x9f77c4], ebx
push dword [0x9f774c]
call fcn.00405a2a
mov eax, dword [0x9f778c]
cdq
push edx
push eax
mov eax, dword [0x9f77c4]
cdq
add dword [esp], eax
adc dword [esp + 4], edx
mov eax, dword [0x9f7784]
cdq
add dword [esp], eax
adc dword [esp + 4], edx
add dword [esp], 0xb516e34c
adc dword [esp + 4], 0xf3a
pop dword [0x9f7728]
pop dword [0x9f772c]
push edx
call fcn.0040f010
pop edx
push eax
mov edx, 0x46206c
push edx
call fcn.0040f0e0
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f010
pop edx
push eax
push dword [0x9f772c]
push dword [0x9f7728]
call fcn.0040da00
pop eax
mov edx, 0x46206c
push edx
call fcn.0040f0e0
push 0x9f7790
call fcn.0040f050
push edx
call fcn.0040f010
pop edx
push eax
push 0
push 1
mov eax, 0x46204a
push eax
push dword [0x9f7790]
mov edx, dword [0x9f7788]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, dword [0x9f77c0]
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.0040375a
call fcn.004030a0
push 0x64
call fcn.00405a09
push edx
call fcn.0040f010
pop edx
push eax
mov edx, dword [0x9f7788]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, dword [0x9f77c0]
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407656
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.cheathappens.net
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push edx
call fcn.0040f010
pop edx
push eax
push 2
mov edx, dword [0x9f7744]
push edx
call fcn.0040f010
pop edx
push eax
push edx
call fcn.0040f0e0
mov edx, str.inetcheck.dat
push edx
call fcn.0040f0e0
call fcn.00403082
add dword [esp], edx
call fcn.00407628
call fcn.004030a0
push 2
mov eax, str..dll
push eax
push dword [0x9f7744]
call fcn.00407664
push 2
mov eax, str..tmp
push eax
push dword [0x9f7744]
call fcn.00407664
push 2
mov eax, str..txt
push eax
push dword [0x9f7744]
call fcn.00407664
jmp 0x401f62
push 0
call 0x401f81
call fcn.0040eff0
push dword [0x9f7720]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00403ee0
call fcn.004046fc
call fcn.00404d18
call fcn.00405b3f
call fcn.00406a0d
call fcn.00407a08
call fcn.00407ae0
call fcn.004093ec
call fcn.0040a4e4
call fcn.0040d650
call fcn.0040e698
call fcn.0040e6e2
call fcn.0040e300
ret