Function at 0x4065cf
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.0040f3ac
mov ebx, eax
add ebx, 0x133
mov dword [0x496a1c], ebx
push 0
call fcn.0040f413
mov ebx, eax
add ebx, 0x14f
mov dword [0x496a20], ebx
push 0xffff0001
push 0xffff0001
push dword [0x496a20]
push dword [0x496a1c]
push 1
call fcn.0040f421
push 0xa
call fcn.0040f524
mov dword [0x496780], eax
call fcn.0040f6ac
mov ebx, eax
and ebx, ebx
jne 0x407280
mov dword [0x496a24], 0
mov ebx, dword [0x496780]
cmp ebx, 0x332c
jne 0x407202
call fcn.0040f6bb
mov dword [0x496a24], eax
mov ebx, dword [0x496a24]
cmp ebx, 1
jne 0x406673
jmp 0x408462
mov ebx, dword [0x496a24]
cmp ebx, 3
jne 0x406806
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004121e6
and eax, eax
je 0x4067c3
push 1
call fcn.00412094
push eax
call fcn.00411b94
push 1
call fcn.00410ac8
push eax
call fcn.00411c70
push 0x11
call fcn.00411c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfd0
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.00411c9e
call fcn.00411c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004122fc
push 0
call fcn.00412094
push eax
call fcn.00411b94
push 0
call fcn.00411c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411d22
push 0x11
call fcn.00411c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004121ca
push eax
call fcn.00411cf0
call fcn.00411c27
push 1
call fcn.00411d5f
push 0xff
push 0
call fcn.004121ca
push eax
push 0
call fcn.0040f293
push eax
call fcn.00408574
call fcn.00414120
push eax
push 0
push 0x44f02a
call fcn.00414120
push eax
push eax
call fcn.00410ae4
mov edx, str.help.txt
call fcn.004141f0
call fcn.00414250
push str.notepad.exe
call fcn.00414292
add dword [esp + 4], edx
call fcn.0040cf92
call fcn.004142b0
mov ebx, dword [0x496a24]
cmp ebx, 4
jne 0x40696a
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004121e6
and eax, eax
je 0x406956
push 1
call fcn.00412094
push eax
call fcn.00411b94
push 1
call fcn.00410ac8
push eax
call fcn.00411c70
push 0x11
call fcn.00411c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfd0
push eax
push str.Trainer_Troubleshooting.
push 0
push 0
call fcn.00411c9e
call fcn.00411c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004122fc
push 0
call fcn.00412094
push eax
call fcn.00411b94
push 0
call fcn.00411c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411d22
push 0x11
call fcn.00411c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004121ca
push eax
call fcn.00411cf0
call fcn.00411c27
push 1
call fcn.00411d5f
push 0xff
push 0
call fcn.004121ca
push eax
push 0
call fcn.0040f293
push eax
call fcn.00408574
push 0x44f02a
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.0040cfac
mov ebx, dword [0x496a24]
cmp ebx, 5
jne 0x406ace
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004121e6
and eax, eax
je 0x406aba
push 1
call fcn.00412094
push eax
call fcn.00411b94
push 1
call fcn.00410ac8
push eax
call fcn.00411c70
push 0x11
call fcn.00411c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00411c9e
call fcn.00411c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004122fc
push 0
call fcn.00412094
push eax
call fcn.00411b94
push 0
call fcn.00411c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411d22
push 0x11
call fcn.00411c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004121ca
push eax
call fcn.00411cf0
call fcn.00411c27
push 1
call fcn.00411d5f
push 0xff
push 0
call fcn.004121ca
push eax
push 0
call fcn.0040f293
push eax
call fcn.00408574
push 0x44f02a
push str.www.cheathappens.com
push str.iexplore
call fcn.0040cfac
mov ebx, dword [0x496a24]
cmp ebx, 6
jne 0x406c61
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004121e6
and eax, eax
je 0x406c1e
push 1
call fcn.00412094
push eax
call fcn.00411b94
push 1
call fcn.00410ac8
push eax
call fcn.00411c70
push 0x11
call fcn.00411c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040cfd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00411c9e
call fcn.00411c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004122fc
push 0
call fcn.00412094
push eax
call fcn.00411b94
push 0
call fcn.00411c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040cfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00411d22
push 0x11
call fcn.00411c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004121ca
push eax
call fcn.00411cf0
call fcn.00411c27
push 1
call fcn.00411d5f
push 0xff
push 0
call fcn.004121ca
push eax
push 0
call fcn.0040f293
push eax
call fcn.00408574
call fcn.00414120
push eax
push 0x44f02a
call fcn.00414120
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.004141f0
mov edx, dword [0x496794]
call fcn.004141f0
call fcn.00414250
push str.iexplore
call fcn.00414292
add dword [esp + 4], edx
call fcn.0040cfac
call fcn.004142b0
mov ebx, dword [0x496a24]
cmp ebx, 7
jne 0x406c8a
mov ebp, dword [0x496ecc]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x406c8a
mov ebx, dword [0x496a28]
and ebx, ebx
jne 0x406c8a
mov eax, 1
jmp 0x406c8c
xor eax, eax
and eax, eax
je 0x407202
push 0
push 0
call fcn.0040f6ca
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x44f834]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.0040d190
fadd qword [0x44f83c]
fistp dword [0x496a2c]
mov ebx, dword [0x496a2c]
and ebx, ebx
jle 0x406ced
mov ebx, dword [0x496a2c]
cmp ebx, dword [0x4967a4]
jge 0x406ced
mov eax, 1
jmp 0x406cef
xor eax, eax
and eax, eax
je 0x406ff6
push 1
push 0x44f14a
mov ebx, dword [0x496a2c]
inc ebx
mov ebp, dword [0x496eb4]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040abe0
mov dword [0x496a30], eax
mov ebx, dword [0x496a2c]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a1d0
mov dword [0x496a34], eax
mov ebx, dword [0x496a34]
sub ebx, dword [0x496a30]
mov dword [0x496a38], ebx
push 5
call fcn.0040c014
push 0x12c
call fcn.0040cfe9
mov dword [0x4967b8], 0
mov eax, 0xff
cmp eax, dword [0x4967b8]
jl 0x406d8c
push dword [0x4967b8]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x49681c], eax
inc dword [0x4967b8]
jno 0x406d67
mov dword [0x49681c], 0
mov dword [0x496a3c], 0
mov dword [0x4967b8], 3
mov eax, 0xff
cmp eax, dword [0x4967b8]
jl 0x406de3
push dword [0x4967b8]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x49681c], eax
mov ebx, dword [0x49681c]
and ebx, ebx
je 0x406ddb
mov eax, dword [0x4967b8]
mov dword [0x496a3c], eax
inc dword [0x4967b8]
jno 0x406daa
mov ebx, dword [0x496a3c]
and ebx, ebx
jle 0x406d5d
mov ebx, dword [0x496a3c]
cmp ebx, 0x1b
jne 0x406f52
mov edx, 0x44f02a
lea ecx, [0x49679c]
call fcn.0040a008
mov edx, 0x44f02a
lea ecx, [0x4967a0]
call fcn.0040a008
mov dword [0x4967a4], 0
call fcn.00414120
push eax
mov edx, dword [0x496798]
call fcn.00414120
push eax
call fcn.004141f0
mov edx, str.Options
call fcn.004141f0
call fcn.00414250
push 0xa
call fcn.00414292
add dword [esp + 4], edx
call fcn.00411080
call fcn.004142b0
call fcn.00414120
push eax
push eax
push 0xa
call fcn.00411240
mov edx, 0x44f09e
call fcn.004141f0
push 0x49679c
call fcn.00414160
call fcn.00414120
push eax
push eax
push 0xa
call fcn.00411240
push 0x4967a0
call fcn.00414160
call fcn.00414120
push eax
push eax
push 0xa
call fcn.00411240
mov ebx, dword [0x4967a4]
inc ebx
mov ebp, dword [0x496eb4]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00414160
inc dword [0x4967a4]
push 0xa
call fcn.00411380
mov ebx, eax
cmp ebx, 1
jne 0x406ea8
push 0xa
call fcn.00410d90
push 1
call fcn.0040c014
push 0x12c
call fcn.0040cfe9
mov dword [0x4967b8], 1
mov eax, 0x14
cmp eax, dword [0x4967b8]
jl 0x406f4d
mov ebx, dword [0x4967b8]
mov ebp, dword [0x496eec]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4967b8]
mov ebp, dword [0x496ecc]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4967b8]
jno 0x406f12
jmp 0x406ff6
push 0x64
call fcn.0040cfe9
call fcn.00414120
push eax
mov edx, 0x44f572
call fcn.004141f0
mov ebx, dword [0x496a3c]
mov ebp, dword [0x496ebc]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.004141f0
mov edx, 0x44f14a
call fcn.004141f0
call fcn.00414120
push eax
push eax
push dword [0x496a38]
mov ebx, dword [0x496a2c]
inc ebx
mov ebp, dword [0x496eb4]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040a700
pop eax
mov ebx, dword [0x496a2c]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00414160
push dword [0x496a3c]
mov ebx, dword [0x496a2c]
mov ebp, dword [0x496ecc]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.0040c014
push 0x12c
call fcn.0040cfe9
push 0x120
fld dword [0x4967ac]
push eax
fistp dword [esp]
fld dword [0x4967a8]
push eax
fistp dword [esp]
push 1
call fcn.004121e6
and eax, eax
je 0x407202
push 0
call fcn.00412094
push eax
call fcn.00411b94
push 0
call fcn.00411c87
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040cfd0
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.00411d22
call fcn.00411c27
push 1
call fcn.00412094
push eax
call fcn.00411b94
push 1
call fcn.00410ac8
push eax
call fcn.00411c70
push 0x11
call fcn.00411c87
mov dword [0x4967b8], 1
mov eax, dword [0x4967a4]
cmp eax, dword [0x4967b8]
jl 0x407100
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040cfd0
push eax
mov ebx, dword [0x4967b8]
mov ebp, dword [0x496eb4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4967b8]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00411c9e
inc dword [0x4967b8]
jno 0x4070a7
mov dword [0x4967b8], 1
mov eax, dword [0x4967a4]
cmp eax, dword [0x4967b8]
jl 0x407163
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040cfd0
push eax
mov ebx, dword [0x4967b8]
mov ebp, dword [0x496eb4]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4967b8]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00411c9e
inc dword [0x4967b8]
jno 0x40710a
call fcn.00411c27
push 0
fld dword [0x4967b4]
push eax
fistp dword [esp]
fld dword [0x4967b0]
push eax
fistp dword [esp]
push 1
call fcn.004122fc
push 0
call fcn.00412094
push eax
call fcn.00411b94
push 0x11
call fcn.00411c87
fld dword [0x4967b4]
push eax
fistp dword [esp]
fld dword [0x4967b0]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.004121ca
push eax
call fcn.00411cf0
call fcn.00411c27
push 1
call fcn.00411d5f
push 0xff
push 0
call fcn.004121ca
push eax
push 0
call fcn.0040f293
push eax
call fcn.00408574
mov ebx, dword [0x496780]
cmp ebx, 0x201
jne 0x407280
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.0040f421
call fcn.0040f6bb
mov dword [0x496a24], eax
mov ebx, dword [0x496a24]
cmp ebx, 2
jne 0x407243
push 0
call fcn.0040f731
mov dword [0x496a40], eax
push 0
call fcn.0040f6ca
mov dword [0x496a44], eax
push 0
push 2
push 0xa1
push 0
call fcn.0040f293
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x40728f
push 0x55009553
ret
ret