Function at 0x407650
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.0041038c
mov ebx, eax
add ebx, 0x133
mov dword [0x4a107c], ebx
push 0
call fcn.004103f3
mov ebx, eax
add ebx, 0x14f
mov dword [0x4a1080], ebx
push 0xffff0001
push 0xffff0001
push dword [0x4a1080]
push dword [0x4a107c]
push 1
call fcn.00410401
push 0xa
call fcn.00410504
mov dword [0x4a0ddc], eax
call fcn.0041068c
mov ebx, eax
and ebx, ebx
jne 0x408301
mov dword [0x4a1084], 0
mov ebx, dword [0x4a0ddc]
cmp ebx, 0x332c
jne 0x408283
call fcn.0041069b
mov dword [0x4a1084], eax
mov ebx, dword [0x4a1084]
cmp ebx, 1
jne 0x4076f4
jmp 0x4094e3
mov ebx, dword [0x4a1084]
cmp ebx, 3
jne 0x407887
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004130ff
and eax, eax
je 0x407844
push 1
call fcn.00412fad
push eax
call fcn.00412aad
push 1
call fcn.00411aa8
push eax
call fcn.00412b89
push 0x11
call fcn.00412ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfb0
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.00412bb7
call fcn.00412b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00413215
push 0
call fcn.00412fad
push eax
call fcn.00412aad
push 0
call fcn.00412ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00412c3b
push 0x11
call fcn.00412ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004130e3
push eax
call fcn.00412c09
call fcn.00412b40
push 1
call fcn.00412c78
push 0xff
push 0
call fcn.004130e3
push eax
push 0
call fcn.00410273
push eax
call fcn.00409535
call fcn.00415030
push eax
push 0
push 0x45002a
call fcn.00415030
push eax
push eax
call fcn.00411ac4
mov edx, str.help.txt
call fcn.00415100
call fcn.00415160
push str.notepad.exe
call fcn.004151a2
add dword [esp + 4], edx
call fcn.0040df72
call fcn.004151c0
mov ebx, dword [0x4a1084]
cmp ebx, 4
jne 0x4079eb
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004130ff
and eax, eax
je 0x4079d7
push 1
call fcn.00412fad
push eax
call fcn.00412aad
push 1
call fcn.00411aa8
push eax
call fcn.00412b89
push 0x11
call fcn.00412ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfb0
push eax
push 0x45020f
push 0
push 0
call fcn.00412bb7
call fcn.00412b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00413215
push 0
call fcn.00412fad
push eax
call fcn.00412aad
push 0
call fcn.00412ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00412c3b
push 0x11
call fcn.00412ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004130e3
push eax
call fcn.00412c09
call fcn.00412b40
push 1
call fcn.00412c78
push 0xff
push 0
call fcn.004130e3
push eax
push 0
call fcn.00410273
push eax
call fcn.00409535
push 0x45002a
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.0040df8c
mov ebx, dword [0x4a1084]
cmp ebx, 5
jne 0x407b4f
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004130ff
and eax, eax
je 0x407b3b
push 1
call fcn.00412fad
push eax
call fcn.00412aad
push 1
call fcn.00411aa8
push eax
call fcn.00412b89
push 0x11
call fcn.00412ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfb0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00412bb7
call fcn.00412b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00413215
push 0
call fcn.00412fad
push eax
call fcn.00412aad
push 0
call fcn.00412ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00412c3b
push 0x11
call fcn.00412ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004130e3
push eax
call fcn.00412c09
call fcn.00412b40
push 1
call fcn.00412c78
push 0xff
push 0
call fcn.004130e3
push eax
push 0
call fcn.00410273
push eax
call fcn.00409535
push 0x45002a
push str.www.cheathappens.com
push str.iexplore
call fcn.0040df8c
mov ebx, dword [0x4a1084]
cmp ebx, 6
jne 0x407ce2
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004130ff
and eax, eax
je 0x407c9f
push 1
call fcn.00412fad
push eax
call fcn.00412aad
push 1
call fcn.00411aa8
push eax
call fcn.00412b89
push 0x11
call fcn.00412ba0
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfb0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00412bb7
call fcn.00412b40
push 0
push 0x64
push 0x1f4
push 1
call fcn.00413215
push 0
call fcn.00412fad
push eax
call fcn.00412aad
push 0
call fcn.00412ba0
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfb0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00412c3b
push 0x11
call fcn.00412ba0
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004130e3
push eax
call fcn.00412c09
call fcn.00412b40
push 1
call fcn.00412c78
push 0xff
push 0
call fcn.004130e3
push eax
push 0
call fcn.00410273
push eax
call fcn.00409535
call fcn.00415030
push eax
push 0x45002a
call fcn.00415030
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.00415100
mov edx, dword [0x4a0df0]
call fcn.00415100
call fcn.00415160
push str.iexplore
call fcn.004151a2
add dword [esp + 4], edx
call fcn.0040df8c
call fcn.004151c0
mov ebx, dword [0x4a1084]
cmp ebx, 7
jne 0x407d0b
mov ebp, dword [0x4a150c]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x407d0b
mov ebx, dword [0x4a1088]
and ebx, ebx
jne 0x407d0b
mov eax, 1
jmp 0x407d0d
xor eax, eax
and eax, eax
je 0x408283
push 0
push 0
call fcn.004106aa
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x4507c0]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.0040e170
fadd qword [0x4507c8]
fistp dword [0x4a108c]
mov ebx, dword [0x4a108c]
and ebx, ebx
jle 0x407d6e
mov ebx, dword [0x4a108c]
cmp ebx, dword [0x4a0e00]
jge 0x407d6e
mov eax, 1
jmp 0x407d70
xor eax, eax
and eax, eax
je 0x408077
push 1
push 0x450138
mov ebx, dword [0x4a108c]
inc ebx
mov ebp, dword [0x4a14fc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040bbc0
mov dword [0x4a1090], eax
mov ebx, dword [0x4a108c]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040b1d0
mov dword [0x4a1094], eax
mov ebx, dword [0x4a1094]
sub ebx, dword [0x4a1090]
mov dword [0x4a1098], ebx
push 5
call fcn.0040cff4
push 0x12c
call fcn.0040dfc9
mov dword [0x4a0e14], 0
mov eax, 0xff
cmp eax, dword [0x4a0e14]
jl 0x407e0d
push dword [0x4a0e14]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a0e70], eax
inc dword [0x4a0e14]
jno 0x407de8
mov dword [0x4a0e70], 0
mov dword [0x4a109c], 0
mov dword [0x4a0e14], 3
mov eax, 0xff
cmp eax, dword [0x4a0e14]
jl 0x407e64
push dword [0x4a0e14]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a0e70], eax
mov ebx, dword [0x4a0e70]
and ebx, ebx
je 0x407e5c
mov eax, dword [0x4a0e14]
mov dword [0x4a109c], eax
inc dword [0x4a0e14]
jno 0x407e2b
mov ebx, dword [0x4a109c]
and ebx, ebx
jle 0x407dde
mov ebx, dword [0x4a109c]
cmp ebx, 0x1b
jne 0x407fd3
mov edx, 0x45002a
lea ecx, [0x4a0df8]
call fcn.0040b008
mov edx, 0x45002a
lea ecx, [0x4a0dfc]
call fcn.0040b008
mov dword [0x4a0e00], 0
call fcn.00415030
push eax
mov edx, dword [0x4a0df4]
call fcn.00415030
push eax
call fcn.00415100
mov edx, str.Options
call fcn.00415100
call fcn.00415160
push 0xa
call fcn.004151a2
add dword [esp + 4], edx
call fcn.00412060
call fcn.004151c0
call fcn.00415030
push eax
push eax
push 0xa
call fcn.00412220
mov edx, 0x450094
call fcn.00415100
push 0x4a0df8
call fcn.00415070
call fcn.00415030
push eax
push eax
push 0xa
call fcn.00412220
push 0x4a0dfc
call fcn.00415070
call fcn.00415030
push eax
push eax
push 0xa
call fcn.00412220
mov ebx, dword [0x4a0e00]
inc ebx
mov ebp, dword [0x4a14fc]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00415070
inc dword [0x4a0e00]
push 0xa
call fcn.00412360
mov ebx, eax
cmp ebx, 1
jne 0x407f29
push 0xa
call fcn.00411d70
push 1
call fcn.0040cff4
push 0x12c
call fcn.0040dfc9
mov dword [0x4a0e14], 1
mov eax, 0x14
cmp eax, dword [0x4a0e14]
jl 0x407fce
mov ebx, dword [0x4a0e14]
mov ebp, dword [0x4a152c]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0e14]
mov ebp, dword [0x4a150c]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a0e14]
jno 0x407f93
jmp 0x408077
push 0x64
call fcn.0040dfc9
call fcn.00415030
push eax
mov edx, 0x450506
call fcn.00415100
mov ebx, dword [0x4a109c]
mov ebp, dword [0x4a1504]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.00415100
mov edx, 0x450138
call fcn.00415100
call fcn.00415030
push eax
push eax
push dword [0x4a1098]
mov ebx, dword [0x4a108c]
inc ebx
mov ebp, dword [0x4a14fc]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040b700
pop eax
mov ebx, dword [0x4a108c]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00415070
push dword [0x4a109c]
mov ebx, dword [0x4a108c]
mov ebp, dword [0x4a150c]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.0040cff4
push 0x12c
call fcn.0040dfc9
push 0x120
fld dword [0x4a0e08]
push eax
fistp dword [esp]
fld dword [0x4a0e04]
push eax
fistp dword [esp]
push 1
call fcn.004130ff
and eax, eax
je 0x408283
push 0
call fcn.00412fad
push eax
call fcn.00412aad
push 0
call fcn.00412ba0
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040dfb0
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.00412c3b
call fcn.00412b40
push 1
call fcn.00412fad
push eax
call fcn.00412aad
push 1
call fcn.00411aa8
push eax
call fcn.00412b89
push 0x11
call fcn.00412ba0
mov dword [0x4a0e14], 1
mov eax, dword [0x4a0e00]
cmp eax, dword [0x4a0e14]
jl 0x408181
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040dfb0
push eax
mov ebx, dword [0x4a0e14]
mov ebp, dword [0x4a14fc]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0e14]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00412bb7
inc dword [0x4a0e14]
jno 0x408128
mov dword [0x4a0e14], 1
mov eax, dword [0x4a0e00]
cmp eax, dword [0x4a0e14]
jl 0x4081e4
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dfb0
push eax
mov ebx, dword [0x4a0e14]
mov ebp, dword [0x4a14fc]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0e14]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00412bb7
inc dword [0x4a0e14]
jno 0x40818b
call fcn.00412b40
push 0
fld dword [0x4a0e10]
push eax
fistp dword [esp]
fld dword [0x4a0e0c]
push eax
fistp dword [esp]
push 1
call fcn.00413215
push 0
call fcn.00412fad
push eax
call fcn.00412aad
push 0x11
call fcn.00412ba0
fld dword [0x4a0e10]
push eax
fistp dword [esp]
fld dword [0x4a0e0c]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.004130e3
push eax
call fcn.00412c09
call fcn.00412b40
push 1
call fcn.00412c78
push 0xff
push 0
call fcn.004130e3
push eax
push 0
call fcn.00410273
push eax
call fcn.00409535
mov ebx, dword [0x4a0ddc]
cmp ebx, 0x201
jne 0x408301
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.00410401
call fcn.0041069b
mov dword [0x4a1084], eax
mov ebx, dword [0x4a1084]
cmp ebx, 2
jne 0x4082c4
push 0
call fcn.00410711
mov dword [0x4a10a0], eax
push 0
call fcn.004106aa
mov dword [0x4a10a4], eax
push 0
push 2
push 0xa1
push 0
call fcn.00410273
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x408310
push 0x55009553
ret
ret