Function at 0x406000
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.0040f38c
mov ebx, eax
add ebx, 0x133
mov dword [0x4a0a70], ebx
push 0
call fcn.0040f3f3
mov ebx, eax
add ebx, 0x14f
mov dword [0x4a0a74], ebx
push 0xffff0001
push 0xffff0001
push dword [0x4a0a74]
push dword [0x4a0a70]
push 1
call fcn.0040f401
push 0xa
call fcn.0040f504
mov dword [0x4a081c], eax
call fcn.0040f68c
mov ebx, eax
and ebx, ebx
jne 0x406cb1
mov dword [0x4a0a78], 0
mov ebx, dword [0x4a081c]
cmp ebx, 0x332c
jne 0x406c33
call fcn.0040f69b
mov dword [0x4a0a78], eax
mov ebx, dword [0x4a0a78]
cmp ebx, 1
jne 0x4060a4
jmp 0x407e93
mov ebx, dword [0x4a0a78]
cmp ebx, 3
jne 0x406237
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004120ff
and eax, eax
je 0x4061f4
push 1
call fcn.00411fad
push eax
call fcn.00411aad
push 1
call fcn.00410aa8
push eax
call fcn.00411b89
push 0x11
call fcn.00411ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfb0
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.00411bb7
call fcn.00411b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412215
push 0
call fcn.00411fad
push eax
call fcn.00411aad
push 0
call fcn.00411ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411c3b
push 0x11
call fcn.00411ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004120e3
push eax
call fcn.00411c09
call fcn.00411b40
push 1
call fcn.00411c78
push 0xff
push 0
call fcn.004120e3
push eax
push 0
call fcn.0040f273
push eax
call fcn.00407ee5
call fcn.00414010
push eax
push 0
push 0x44f02a
call fcn.00414010
push eax
push eax
call fcn.00410ac4
mov edx, str.help.txt
call fcn.004140e0
call fcn.00414140
push str.notepad.exe
call fcn.00414182
add dword [esp + 4], edx
call fcn.0040cf72
call fcn.004141a0
mov ebx, dword [0x4a0a78]
cmp ebx, 4
jne 0x40639b
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004120ff
and eax, eax
je 0x406387
push 1
call fcn.00411fad
push eax
call fcn.00411aad
push 1
call fcn.00410aa8
push eax
call fcn.00411b89
push 0x11
call fcn.00411ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfb0
push eax
push 0x44f220
push 0
push 0
call fcn.00411bb7
call fcn.00411b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412215
push 0
call fcn.00411fad
push eax
call fcn.00411aad
push 0
call fcn.00411ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411c3b
push 0x11
call fcn.00411ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004120e3
push eax
call fcn.00411c09
call fcn.00411b40
push 1
call fcn.00411c78
push 0xff
push 0
call fcn.004120e3
push eax
push 0
call fcn.0040f273
push eax
call fcn.00407ee5
push 0x44f02a
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.0040cf8c
mov ebx, dword [0x4a0a78]
cmp ebx, 5
jne 0x4064ff
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004120ff
and eax, eax
je 0x4064eb
push 1
call fcn.00411fad
push eax
call fcn.00411aad
push 1
call fcn.00410aa8
push eax
call fcn.00411b89
push 0x11
call fcn.00411ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfb0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00411bb7
call fcn.00411b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412215
push 0
call fcn.00411fad
push eax
call fcn.00411aad
push 0
call fcn.00411ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411c3b
push 0x11
call fcn.00411ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004120e3
push eax
call fcn.00411c09
call fcn.00411b40
push 1
call fcn.00411c78
push 0xff
push 0
call fcn.004120e3
push eax
push 0
call fcn.0040f273
push eax
call fcn.00407ee5
push 0x44f02a
push str.www.cheathappens.com
push str.iexplore
call fcn.0040cf8c
mov ebx, dword [0x4a0a78]
cmp ebx, 6
jne 0x406692
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004120ff
and eax, eax
je 0x40664f
push 1
call fcn.00411fad
push eax
call fcn.00411aad
push 1
call fcn.00410aa8
push eax
call fcn.00411b89
push 0x11
call fcn.00411ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfb0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00411bb7
call fcn.00411b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412215
push 0
call fcn.00411fad
push eax
call fcn.00411aad
push 0
call fcn.00411ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411c3b
push 0x11
call fcn.00411ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004120e3
push eax
call fcn.00411c09
call fcn.00411b40
push 1
call fcn.00411c78
push 0xff
push 0
call fcn.004120e3
push eax
push 0
call fcn.0040f273
push eax
call fcn.00407ee5
call fcn.00414010
push eax
push 0x44f02a
call fcn.00414010
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.004140e0
mov edx, dword [0x4a0830]
call fcn.004140e0
call fcn.00414140
push str.iexplore
call fcn.00414182
add dword [esp + 4], edx
call fcn.0040cf8c
call fcn.004141a0
mov ebx, dword [0x4a0a78]
cmp ebx, 7
jne 0x4066bb
mov ebp, dword [0x4a0f14]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x4066bb
mov ebx, dword [0x4a0a7c]
and ebx, ebx
jne 0x4066bb
mov eax, 1
jmp 0x4066bd
xor eax, eax
and eax, eax
je 0x406c33
push 0
push 0
call fcn.0040f6aa
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x44f7c0]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.0040d170
fadd qword [0x44f7c8]
fistp dword [0x4a0a80]
mov ebx, dword [0x4a0a80]
and ebx, ebx
jle 0x40671e
mov ebx, dword [0x4a0a80]
cmp ebx, dword [0x4a0840]
jge 0x40671e
mov eax, 1
jmp 0x406720
xor eax, eax
and eax, eax
je 0x406a27
push 1
push 0x44f149
mov ebx, dword [0x4a0a80]
inc ebx
mov ebp, dword [0x4a0f04]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040abc0
mov dword [0x4a0a84], eax
mov ebx, dword [0x4a0a80]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a1d0
mov dword [0x4a0a88], eax
mov ebx, dword [0x4a0a88]
sub ebx, dword [0x4a0a84]
mov dword [0x4a0a8c], ebx
push 5
call fcn.0040bff4
push 0x12c
call fcn.0040cfc9
mov dword [0x4a0854], 0
mov eax, 0xff
cmp eax, dword [0x4a0854]
jl 0x4067bd
push dword [0x4a0854]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a08b0], eax
inc dword [0x4a0854]
jno 0x406798
mov dword [0x4a08b0], 0
mov dword [0x4a0a90], 0
mov dword [0x4a0854], 3
mov eax, 0xff
cmp eax, dword [0x4a0854]
jl 0x406814
push dword [0x4a0854]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a08b0], eax
mov ebx, dword [0x4a08b0]
and ebx, ebx
je 0x40680c
mov eax, dword [0x4a0854]
mov dword [0x4a0a90], eax
inc dword [0x4a0854]
jno 0x4067db
mov ebx, dword [0x4a0a90]
and ebx, ebx
jle 0x40678e
mov ebx, dword [0x4a0a90]
cmp ebx, 0x1b
jne 0x406983
mov edx, 0x44f02a
lea ecx, [0x4a0838]
call fcn.0040a008
mov edx, 0x44f02a
lea ecx, [0x4a083c]
call fcn.0040a008
mov dword [0x4a0840], 0
call fcn.00414010
push eax
mov edx, dword [0x4a0834]
call fcn.00414010
push eax
call fcn.004140e0
mov edx, str.Options
call fcn.004140e0
call fcn.00414140
push 0xa
call fcn.00414182
add dword [esp + 4], edx
call fcn.00411060
call fcn.004141a0
call fcn.00414010
push eax
push eax
push 0xa
call fcn.00411220
mov edx, 0x44f094
call fcn.004140e0
push 0x4a0838
call fcn.00414050
call fcn.00414010
push eax
push eax
push 0xa
call fcn.00411220
push 0x4a083c
call fcn.00414050
call fcn.00414010
push eax
push eax
push 0xa
call fcn.00411220
mov ebx, dword [0x4a0840]
inc ebx
mov ebp, dword [0x4a0f04]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00414050
inc dword [0x4a0840]
push 0xa
call fcn.00411360
mov ebx, eax
cmp ebx, 1
jne 0x4068d9
push 0xa
call fcn.00410d70
push 1
call fcn.0040bff4
push 0x12c
call fcn.0040cfc9
mov dword [0x4a0854], 1
mov eax, 0x14
cmp eax, dword [0x4a0854]
jl 0x40697e
mov ebx, dword [0x4a0854]
mov ebp, dword [0x4a0f34]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0854]
mov ebp, dword [0x4a0f14]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a0854]
jno 0x406943
jmp 0x406a27
push 0x64
call fcn.0040cfc9
call fcn.00414010
push eax
mov edx, 0x44f510
call fcn.004140e0
mov ebx, dword [0x4a0a90]
mov ebp, dword [0x4a0f0c]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.004140e0
mov edx, 0x44f149
call fcn.004140e0
call fcn.00414010
push eax
push eax
push dword [0x4a0a8c]
mov ebx, dword [0x4a0a80]
inc ebx
mov ebp, dword [0x4a0f04]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a700
pop eax
mov ebx, dword [0x4a0a80]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00414050
push dword [0x4a0a90]
mov ebx, dword [0x4a0a80]
mov ebp, dword [0x4a0f14]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.0040bff4
push 0x12c
call fcn.0040cfc9
push 0x120
fld dword [0x4a0848]
push eax
fistp dword [esp]
fld dword [0x4a0844]
push eax
fistp dword [esp]
push 1
call fcn.004120ff
and eax, eax
je 0x406c33
push 0
call fcn.00411fad
push eax
call fcn.00411aad
push 0
call fcn.00411ba0
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040cfb0
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.00411c3b
call fcn.00411b40
push 1
call fcn.00411fad
push eax
call fcn.00411aad
push 1
call fcn.00410aa8
push eax
call fcn.00411b89
push 0x11
call fcn.00411ba0
mov dword [0x4a0854], 1
mov eax, dword [0x4a0840]
cmp eax, dword [0x4a0854]
jl 0x406b31
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040cfb0
push eax
mov ebx, dword [0x4a0854]
mov ebp, dword [0x4a0f04]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0854]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00411bb7
inc dword [0x4a0854]
jno 0x406ad8
mov dword [0x4a0854], 1
mov eax, dword [0x4a0840]
cmp eax, dword [0x4a0854]
jl 0x406b94
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040cfb0
push eax
mov ebx, dword [0x4a0854]
mov ebp, dword [0x4a0f04]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0854]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00411bb7
inc dword [0x4a0854]
jno 0x406b3b
call fcn.00411b40
push 0
fld dword [0x4a0850]
push eax
fistp dword [esp]
fld dword [0x4a084c]
push eax
fistp dword [esp]
push 1
call fcn.00412215
push 0
call fcn.00411fad
push eax
call fcn.00411aad
push 0x11
call fcn.00411ba0
fld dword [0x4a0850]
push eax
fistp dword [esp]
fld dword [0x4a084c]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.004120e3
push eax
call fcn.00411c09
call fcn.00411b40
push 1
call fcn.00411c78
push 0xff
push 0
call fcn.004120e3
push eax
push 0
call fcn.0040f273
push eax
call fcn.00407ee5
mov ebx, dword [0x4a081c]
cmp ebx, 0x201
jne 0x406cb1
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.0040f401
call fcn.0040f69b
mov dword [0x4a0a78], eax
mov ebx, dword [0x4a0a78]
cmp ebx, 2
jne 0x406c74
push 0
call fcn.0040f711
mov dword [0x4a0a94], eax
push 0
call fcn.0040f6aa
mov dword [0x4a0a98], eax
push 0
push 2
push 0xa1
push 0
call fcn.0040f273
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x406cc0
push 0x55009553
ret
ret