Function at 0x40718b
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.004107c8
mov ebx, eax
add ebx, 0x133
mov dword [0x4a0dc4], ebx
push 0
call fcn.0041082f
mov ebx, eax
add ebx, 0x14f
mov dword [0x4a0dc8], ebx
push 0xffff0001
push 0xffff0001
push dword [0x4a0dc8]
push dword [0x4a0dc4]
push 1
call fcn.0041083d
push 0xa
call fcn.00410940
mov dword [0x4a0b18], eax
call fcn.00410ac8
mov ebx, eax
and ebx, ebx
jne 0x407e3c
mov dword [0x4a0dcc], 0
mov ebx, dword [0x4a0b18]
cmp ebx, 0x332c
jne 0x407dbe
call fcn.00410ad7
mov dword [0x4a0dcc], eax
mov ebx, dword [0x4a0dcc]
cmp ebx, 1
jne 0x40722f
jmp 0x40901e
mov ebx, dword [0x4a0dcc]
cmp ebx, 3
jne 0x4073c2
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413606
and eax, eax
je 0x40737f
push 1
call fcn.004134b4
push eax
call fcn.00412fb4
push 1
call fcn.00411ee4
push eax
call fcn.00413090
push 0x11
call fcn.004130a7
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfd0
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.004130be
call fcn.00413047
push 0
push 0x64
push 0x1f4
push 1
call fcn.0041371c
push 0
call fcn.004134b4
push eax
call fcn.00412fb4
push 0
call fcn.004130a7
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413142
push 0x11
call fcn.004130a7
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004135ea
push eax
call fcn.00413110
call fcn.00413047
push 1
call fcn.0041317f
push 0xff
push 0
call fcn.004135ea
push eax
push 0
call fcn.004106af
push eax
call fcn.00409130
call fcn.00415540
push eax
push 0
push 0x45002d
call fcn.00415540
push eax
push eax
call fcn.00411f00
mov edx, str.help.txt
call fcn.00415610
call fcn.00415670
push str.notepad.exe
call fcn.004156b2
add dword [esp + 4], edx
call fcn.0040df92
call fcn.004156d0
mov ebx, dword [0x4a0dcc]
cmp ebx, 4
jne 0x407526
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413606
and eax, eax
je 0x407512
push 1
call fcn.004134b4
push eax
call fcn.00412fb4
push 1
call fcn.00411ee4
push eax
call fcn.00413090
push 0x11
call fcn.004130a7
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfd0
push eax
push 0x450239
push 0
push 0
call fcn.004130be
call fcn.00413047
push 0
push 0x64
push 0x1f4
push 1
call fcn.0041371c
push 0
call fcn.004134b4
push eax
call fcn.00412fb4
push 0
call fcn.004130a7
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413142
push 0x11
call fcn.004130a7
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004135ea
push eax
call fcn.00413110
call fcn.00413047
push 1
call fcn.0041317f
push 0xff
push 0
call fcn.004135ea
push eax
push 0
call fcn.004106af
push eax
call fcn.00409130
push 0x45002d
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.0040dfac
mov ebx, dword [0x4a0dcc]
cmp ebx, 5
jne 0x40768a
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413606
and eax, eax
je 0x407676
push 1
call fcn.004134b4
push eax
call fcn.00412fb4
push 1
call fcn.00411ee4
push eax
call fcn.00413090
push 0x11
call fcn.004130a7
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.004130be
call fcn.00413047
push 0
push 0x64
push 0x1f4
push 1
call fcn.0041371c
push 0
call fcn.004134b4
push eax
call fcn.00412fb4
push 0
call fcn.004130a7
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413142
push 0x11
call fcn.004130a7
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004135ea
push eax
call fcn.00413110
call fcn.00413047
push 1
call fcn.0041317f
push 0xff
push 0
call fcn.004135ea
push eax
push 0
call fcn.004106af
push eax
call fcn.00409130
push 0x45002d
push str.www.cheathappens.com
push str.iexplore
call fcn.0040dfac
mov ebx, dword [0x4a0dcc]
cmp ebx, 6
jne 0x40781d
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413606
and eax, eax
je 0x4077da
push 1
call fcn.004134b4
push eax
call fcn.00412fb4
push 1
call fcn.00411ee4
push eax
call fcn.00413090
push 0x11
call fcn.004130a7
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dfd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.004130be
call fcn.00413047
push 0
push 0x64
push 0x1f4
push 1
call fcn.0041371c
push 0
call fcn.004134b4
push eax
call fcn.00412fb4
push 0
call fcn.004130a7
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dfd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413142
push 0x11
call fcn.004130a7
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004135ea
push eax
call fcn.00413110
call fcn.00413047
push 1
call fcn.0041317f
push 0xff
push 0
call fcn.004135ea
push eax
push 0
call fcn.004106af
push eax
call fcn.00409130
call fcn.00415540
push eax
push 0x45002d
call fcn.00415540
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.00415610
mov edx, dword [0x4a0b2c]
call fcn.00415610
call fcn.00415670
push str.iexplore
call fcn.004156b2
add dword [esp + 4], edx
call fcn.0040dfac
call fcn.004156d0
mov ebx, dword [0x4a0dcc]
cmp ebx, 7
jne 0x407846
mov ebp, dword [0x4a125c]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x407846
mov ebx, dword [0x4a0dd0]
and ebx, ebx
jne 0x407846
mov eax, 1
jmp 0x407848
xor eax, eax
and eax, eax
je 0x407dbe
push 0
push 0
call fcn.00410ae6
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x4508bc]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.0040e190
fadd qword [0x4508c4]
fistp dword [0x4a0dd4]
mov ebx, dword [0x4a0dd4]
and ebx, ebx
jle 0x4078a9
mov ebx, dword [0x4a0dd4]
cmp ebx, dword [0x4a0b3c]
jge 0x4078a9
mov eax, 1
jmp 0x4078ab
xor eax, eax
and eax, eax
je 0x407bb2
push 1
push 0x45014d
mov ebx, dword [0x4a0dd4]
inc ebx
mov ebp, dword [0x4a1244]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040bbe0
mov dword [0x4a0dd8], eax
mov ebx, dword [0x4a0dd4]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040b1d0
mov dword [0x4a0ddc], eax
mov ebx, dword [0x4a0ddc]
sub ebx, dword [0x4a0dd8]
mov dword [0x4a0de0], ebx
push 5
call fcn.0040d014
push 0x12c
call fcn.0040dfe9
mov dword [0x4a0b50], 0
mov eax, 0xff
cmp eax, dword [0x4a0b50]
jl 0x407948
push dword [0x4a0b50]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a0bb4], eax
inc dword [0x4a0b50]
jno 0x407923
mov dword [0x4a0bb4], 0
mov dword [0x4a0de4], 0
mov dword [0x4a0b50], 3
mov eax, 0xff
cmp eax, dword [0x4a0b50]
jl 0x40799f
push dword [0x4a0b50]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a0bb4], eax
mov ebx, dword [0x4a0bb4]
and ebx, ebx
je 0x407997
mov eax, dword [0x4a0b50]
mov dword [0x4a0de4], eax
inc dword [0x4a0b50]
jno 0x407966
mov ebx, dword [0x4a0de4]
and ebx, ebx
jle 0x407919
mov ebx, dword [0x4a0de4]
cmp ebx, 0x1b
jne 0x407b0e
mov edx, 0x45002d
lea ecx, [0x4a0b34]
call fcn.0040b008
mov edx, 0x45002d
lea ecx, [0x4a0b38]
call fcn.0040b008
mov dword [0x4a0b3c], 0
call fcn.00415540
push eax
mov edx, dword [0x4a0b30]
call fcn.00415540
push eax
call fcn.00415610
mov edx, str.Options
call fcn.00415610
call fcn.00415670
push 0xa
call fcn.004156b2
add dword [esp + 4], edx
call fcn.004124a0
call fcn.004156d0
call fcn.00415540
push eax
push eax
push 0xa
call fcn.00412660
mov edx, 0x4500a1
call fcn.00415610
push 0x4a0b34
call fcn.00415580
call fcn.00415540
push eax
push eax
push 0xa
call fcn.00412660
push 0x4a0b38
call fcn.00415580
call fcn.00415540
push eax
push eax
push 0xa
call fcn.00412660
mov ebx, dword [0x4a0b3c]
inc ebx
mov ebp, dword [0x4a1244]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00415580
inc dword [0x4a0b3c]
push 0xa
call fcn.004127a0
mov ebx, eax
cmp ebx, 1
jne 0x407a64
push 0xa
call fcn.004121b0
push 1
call fcn.0040d014
push 0x12c
call fcn.0040dfe9
mov dword [0x4a0b50], 1
mov eax, 0x14
cmp eax, dword [0x4a0b50]
jl 0x407b09
mov ebx, dword [0x4a0b50]
mov ebp, dword [0x4a127c]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0b50]
mov ebp, dword [0x4a125c]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a0b50]
jno 0x407ace
jmp 0x407bb2
push 0x64
call fcn.0040dfe9
call fcn.00415540
push eax
mov edx, 0x450581
call fcn.00415610
mov ebx, dword [0x4a0de4]
mov ebp, dword [0x4a124c]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.00415610
mov edx, 0x45014d
call fcn.00415610
call fcn.00415540
push eax
push eax
push dword [0x4a0de0]
mov ebx, dword [0x4a0dd4]
inc ebx
mov ebp, dword [0x4a1244]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040b700
pop eax
mov ebx, dword [0x4a0dd4]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00415580
push dword [0x4a0de4]
mov ebx, dword [0x4a0dd4]
mov ebp, dword [0x4a125c]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.0040d014
push 0x12c
call fcn.0040dfe9
push 0x120
fld dword [0x4a0b44]
push eax
fistp dword [esp]
fld dword [0x4a0b40]
push eax
fistp dword [esp]
push 1
call fcn.00413606
and eax, eax
je 0x407dbe
push 0
call fcn.004134b4
push eax
call fcn.00412fb4
push 0
call fcn.004130a7
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040dfd0
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.00413142
call fcn.00413047
push 1
call fcn.004134b4
push eax
call fcn.00412fb4
push 1
call fcn.00411ee4
push eax
call fcn.00413090
push 0x11
call fcn.004130a7
mov dword [0x4a0b50], 1
mov eax, dword [0x4a0b3c]
cmp eax, dword [0x4a0b50]
jl 0x407cbc
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040dfd0
push eax
mov ebx, dword [0x4a0b50]
mov ebp, dword [0x4a1244]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0b50]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.004130be
inc dword [0x4a0b50]
jno 0x407c63
mov dword [0x4a0b50], 1
mov eax, dword [0x4a0b3c]
cmp eax, dword [0x4a0b50]
jl 0x407d1f
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dfd0
push eax
mov ebx, dword [0x4a0b50]
mov ebp, dword [0x4a1244]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a0b50]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.004130be
inc dword [0x4a0b50]
jno 0x407cc6
call fcn.00413047
push 0
fld dword [0x4a0b4c]
push eax
fistp dword [esp]
fld dword [0x4a0b48]
push eax
fistp dword [esp]
push 1
call fcn.0041371c
push 0
call fcn.004134b4
push eax
call fcn.00412fb4
push 0x11
call fcn.004130a7
fld dword [0x4a0b4c]
push eax
fistp dword [esp]
fld dword [0x4a0b48]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.004135ea
push eax
call fcn.00413110
call fcn.00413047
push 1
call fcn.0041317f
push 0xff
push 0
call fcn.004135ea
push eax
push 0
call fcn.004106af
push eax
call fcn.00409130
mov ebx, dword [0x4a0b18]
cmp ebx, 0x201
jne 0x407e3c
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.0041083d
call fcn.00410ad7
mov dword [0x4a0dcc], eax
mov ebx, dword [0x4a0dcc]
cmp ebx, 2
jne 0x407dff
push 0
call fcn.00410b4d
mov dword [0x4a0de8], eax
push 0
call fcn.00410ae6
mov dword [0x4a0dec], eax
push 0
push 2
push 0xa1
push 0
call fcn.004106af
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x407e4b
push 0x55009553
ret
ret