Function at 0x40b84c
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.004143ac
mov ebx, eax
add ebx, 0x133
mov dword [0x4a768c], ebx
push 0
call fcn.00414413
mov ebx, eax
add ebx, 0x14f
mov dword [0x4a7690], ebx
push 0xffff0001
push 0xffff0001
push dword [0x4a7690]
push dword [0x4a768c]
push 1
call fcn.00414421
push 0xa
call fcn.00414524
mov dword [0x4a73a8], eax
call fcn.004146ac
mov ebx, eax
and ebx, ebx
jne 0x40c4fd
mov dword [0x4a7694], 0
mov ebx, dword [0x4a73a8]
cmp ebx, 0x332c
jne 0x40c47f
call fcn.004146bb
mov dword [0x4a7694], eax
mov ebx, dword [0x4a7694]
cmp ebx, 1
jne 0x40b8f0
jmp 0x40d6df
mov ebx, dword [0x4a7694]
cmp ebx, 3
jne 0x40ba83
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004171e6
and eax, eax
je 0x40ba40
push 1
call fcn.00417094
push eax
call fcn.00416b94
push 1
call fcn.00415ac8
push eax
call fcn.00416c70
push 0x11
call fcn.00416c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.00411fd0
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.00416c9e
call fcn.00416c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004172fc
push 0
call fcn.00417094
push eax
call fcn.00416b94
push 0
call fcn.00416c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.00411fd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00416d22
push 0x11
call fcn.00416c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004171ca
push eax
call fcn.00416cf0
call fcn.00416c27
push 1
call fcn.00416d5f
push 0xff
push 0
call fcn.004171ca
push eax
push 0
call fcn.00414293
push eax
call fcn.0040d7f1
call fcn.00419140
push eax
push 0
push 0x45402a
call fcn.00419140
push eax
push eax
call fcn.00415ae4
mov edx, str.help.txt
call fcn.00419210
call fcn.00419270
push str.notepad.exe
call fcn.004192b2
add dword [esp + 4], edx
call fcn.00411f92
call fcn.004192d0
mov ebx, dword [0x4a7694]
cmp ebx, 4
jne 0x40bbe7
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004171e6
and eax, eax
je 0x40bbd3
push 1
call fcn.00417094
push eax
call fcn.00416b94
push 1
call fcn.00415ac8
push eax
call fcn.00416c70
push 0x11
call fcn.00416c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.00411fd0
push eax
push 0x45425f
push 0
push 0
call fcn.00416c9e
call fcn.00416c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004172fc
push 0
call fcn.00417094
push eax
call fcn.00416b94
push 0
call fcn.00416c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.00411fd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00416d22
push 0x11
call fcn.00416c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004171ca
push eax
call fcn.00416cf0
call fcn.00416c27
push 1
call fcn.00416d5f
push 0xff
push 0
call fcn.004171ca
push eax
push 0
call fcn.00414293
push eax
call fcn.0040d7f1
push 0x45402a
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.00411fac
mov ebx, dword [0x4a7694]
cmp ebx, 5
jne 0x40bd4b
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004171e6
and eax, eax
je 0x40bd37
push 1
call fcn.00417094
push eax
call fcn.00416b94
push 1
call fcn.00415ac8
push eax
call fcn.00416c70
push 0x11
call fcn.00416c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.00411fd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00416c9e
call fcn.00416c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004172fc
push 0
call fcn.00417094
push eax
call fcn.00416b94
push 0
call fcn.00416c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.00411fd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00416d22
push 0x11
call fcn.00416c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004171ca
push eax
call fcn.00416cf0
call fcn.00416c27
push 1
call fcn.00416d5f
push 0xff
push 0
call fcn.004171ca
push eax
push 0
call fcn.00414293
push eax
call fcn.0040d7f1
push 0x45402a
push str.www.cheathappens.com
push str.iexplore
call fcn.00411fac
mov ebx, dword [0x4a7694]
cmp ebx, 6
jne 0x40bede
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004171e6
and eax, eax
je 0x40be9b
push 1
call fcn.00417094
push eax
call fcn.00416b94
push 1
call fcn.00415ac8
push eax
call fcn.00416c70
push 0x11
call fcn.00416c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.00411fd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00416c9e
call fcn.00416c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004172fc
push 0
call fcn.00417094
push eax
call fcn.00416b94
push 0
call fcn.00416c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.00411fd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00416d22
push 0x11
call fcn.00416c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004171ca
push eax
call fcn.00416cf0
call fcn.00416c27
push 1
call fcn.00416d5f
push 0xff
push 0
call fcn.004171ca
push eax
push 0
call fcn.00414293
push eax
call fcn.0040d7f1
call fcn.00419140
push eax
push 0x45402a
call fcn.00419140
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.00419210
mov edx, dword [0x4a73bc]
call fcn.00419210
call fcn.00419270
push str.iexplore
call fcn.004192b2
add dword [esp + 4], edx
call fcn.00411fac
call fcn.004192d0
mov ebx, dword [0x4a7694]
cmp ebx, 7
jne 0x40bf07
mov ebp, dword [0x4a7b10]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x40bf07
mov ebx, dword [0x4a7698]
and ebx, ebx
jne 0x40bf07
mov eax, 1
jmp 0x40bf09
xor eax, eax
and eax, eax
je 0x40c47f
push 0
push 0
call fcn.004146ca
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x4548e0]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.00412190
fadd qword [0x4548e8]
fistp dword [0x4a769c]
mov ebx, dword [0x4a769c]
and ebx, ebx
jle 0x40bf6a
mov ebx, dword [0x4a769c]
cmp ebx, dword [0x4a73cc]
jge 0x40bf6a
mov eax, 1
jmp 0x40bf6c
xor eax, eax
and eax, eax
je 0x40c273
push 1
push 0x454168
mov ebx, dword [0x4a769c]
inc ebx
mov ebp, dword [0x4a7af8]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040fbe0
mov dword [0x4a76a0], eax
mov ebx, dword [0x4a769c]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040f1d0
mov dword [0x4a76a4], eax
mov ebx, dword [0x4a76a4]
sub ebx, dword [0x4a76a0]
mov dword [0x4a76a8], ebx
push 5
call fcn.00411014
push 0x12c
call fcn.00411fe9
mov dword [0x4a73e0], 0
mov eax, 0xff
cmp eax, dword [0x4a73e0]
jl 0x40c009
push dword [0x4a73e0]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a7444], eax
inc dword [0x4a73e0]
jno 0x40bfe4
mov dword [0x4a7444], 0
mov dword [0x4a76ac], 0
mov dword [0x4a73e0], 3
mov eax, 0xff
cmp eax, dword [0x4a73e0]
jl 0x40c060
push dword [0x4a73e0]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a7444], eax
mov ebx, dword [0x4a7444]
and ebx, ebx
je 0x40c058
mov eax, dword [0x4a73e0]
mov dword [0x4a76ac], eax
inc dword [0x4a73e0]
jno 0x40c027
mov ebx, dword [0x4a76ac]
and ebx, ebx
jle 0x40bfda
mov ebx, dword [0x4a76ac]
cmp ebx, 0x1b
jne 0x40c1cf
mov edx, 0x45402a
lea ecx, [0x4a73c4]
call fcn.0040f008
mov edx, 0x45402a
lea ecx, [0x4a73c8]
call fcn.0040f008
mov dword [0x4a73cc], 0
call fcn.00419140
push eax
mov edx, dword [0x4a73c0]
call fcn.00419140
push eax
call fcn.00419210
mov edx, str.Options
call fcn.00419210
call fcn.00419270
push 0xa
call fcn.004192b2
add dword [esp + 4], edx
call fcn.00416080
call fcn.004192d0
call fcn.00419140
push eax
push eax
push 0xa
call fcn.00416240
mov edx, 0x45409e
call fcn.00419210
push 0x4a73c4
call fcn.00419180
call fcn.00419140
push eax
push eax
push 0xa
call fcn.00416240
push 0x4a73c8
call fcn.00419180
call fcn.00419140
push eax
push eax
push 0xa
call fcn.00416240
mov ebx, dword [0x4a73cc]
inc ebx
mov ebp, dword [0x4a7af8]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00419180
inc dword [0x4a73cc]
push 0xa
call fcn.00416380
mov ebx, eax
cmp ebx, 1
jne 0x40c125
push 0xa
call fcn.00415d90
push 1
call fcn.00411014
push 0x12c
call fcn.00411fe9
mov dword [0x4a73e0], 1
mov eax, 0x14
cmp eax, dword [0x4a73e0]
jl 0x40c1ca
mov ebx, dword [0x4a73e0]
mov ebp, dword [0x4a7b30]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a73e0]
mov ebp, dword [0x4a7b10]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a73e0]
jno 0x40c18f
jmp 0x40c273
push 0x64
call fcn.00411fe9
call fcn.00419140
push eax
mov edx, 0x4545c7
call fcn.00419210
mov ebx, dword [0x4a76ac]
mov ebp, dword [0x4a7b00]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.00419210
mov edx, 0x454168
call fcn.00419210
call fcn.00419140
push eax
push eax
push dword [0x4a76a8]
mov ebx, dword [0x4a769c]
inc ebx
mov ebp, dword [0x4a7af8]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040f700
pop eax
mov ebx, dword [0x4a769c]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00419180
push dword [0x4a76ac]
mov ebx, dword [0x4a769c]
mov ebp, dword [0x4a7b10]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.00411014
push 0x12c
call fcn.00411fe9
push 0x120
fld dword [0x4a73d4]
push eax
fistp dword [esp]
fld dword [0x4a73d0]
push eax
fistp dword [esp]
push 1
call fcn.004171e6
and eax, eax
je 0x40c47f
push 0
call fcn.00417094
push eax
call fcn.00416b94
push 0
call fcn.00416c87
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.00411fd0
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.00416d22
call fcn.00416c27
push 1
call fcn.00417094
push eax
call fcn.00416b94
push 1
call fcn.00415ac8
push eax
call fcn.00416c70
push 0x11
call fcn.00416c87
mov dword [0x4a73e0], 1
mov eax, dword [0x4a73cc]
cmp eax, dword [0x4a73e0]
jl 0x40c37d
push 0xff
push 0
push 0
mov eax, 0
call fcn.00411fd0
push eax
mov ebx, dword [0x4a73e0]
mov ebp, dword [0x4a7af8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a73e0]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00416c9e
inc dword [0x4a73e0]
jno 0x40c324
mov dword [0x4a73e0], 1
mov eax, dword [0x4a73cc]
cmp eax, dword [0x4a73e0]
jl 0x40c3e0
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.00411fd0
push eax
mov ebx, dword [0x4a73e0]
mov ebp, dword [0x4a7af8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a73e0]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00416c9e
inc dword [0x4a73e0]
jno 0x40c387
call fcn.00416c27
push 0
fld dword [0x4a73dc]
push eax
fistp dword [esp]
fld dword [0x4a73d8]
push eax
fistp dword [esp]
push 1
call fcn.004172fc
push 0
call fcn.00417094
push eax
call fcn.00416b94
push 0x11
call fcn.00416c87
fld dword [0x4a73dc]
push eax
fistp dword [esp]
fld dword [0x4a73d8]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.004171ca
push eax
call fcn.00416cf0
call fcn.00416c27
push 1
call fcn.00416d5f
push 0xff
push 0
call fcn.004171ca
push eax
push 0
call fcn.00414293
push eax
call fcn.0040d7f1
mov ebx, dword [0x4a73a8]
cmp ebx, 0x201
jne 0x40c4fd
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.00414421
call fcn.004146bb
mov dword [0x4a7694], eax
mov ebx, dword [0x4a7694]
cmp ebx, 2
jne 0x40c4c0
push 0
call fcn.00414731
mov dword [0x4a76b0], eax
push 0
call fcn.004146ca
mov dword [0x4a76b4], eax
push 0
push 2
push 0xa1
push 0
call fcn.00414293
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x40c50c
push 0x55009553
ret
ret