Function at 0x4077fa
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.00410250
mov ebx, eax
add ebx, 0x133
mov dword [0x494d00], ebx
push 0
call fcn.00410295
mov ebx, eax
add ebx, 0x14f
mov dword [0x494d04], ebx
push 0xffff0001
push 0xffff0001
push dword [0x494d04]
push dword [0x494d00]
push 1
call fcn.004102da
push 0xa
call fcn.004103dd
mov dword [0x494a80], eax
call fcn.00410524
mov ebx, eax
and ebx, ebx
jne 0x4084ab
mov dword [0x494d08], 0
mov ebx, dword [0x494a80]
cmp ebx, 0x332c
jne 0x40842d
call fcn.00410533
mov dword [0x494d08], eax
mov ebx, dword [0x494d08]
cmp ebx, 1
jne 0x40789e
jmp 0x40968d
mov ebx, dword [0x494d08]
cmp ebx, 3
jne 0x407a31
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004129b2
and eax, eax
je 0x4079ee
push 1
call fcn.00412860
push eax
call fcn.00412385
push 1
call fcn.00411624
push eax
call fcn.00412461
push 0x11
call fcn.00412478
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dd90
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.0041248f
call fcn.00412418
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412ac7
push 0
call fcn.00412860
push eax
call fcn.00412385
push 0
call fcn.00412478
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dd90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041250f
push 0x11
call fcn.00412478
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412996
push eax
call fcn.004124dd
call fcn.00412418
push 1
call fcn.0041254a
push 0xff
push 0
call fcn.00412996
push eax
push 0
call fcn.004101c8
push eax
call fcn.004096d5
call fcn.00414440
push eax
push 0
push 0x44e01d
call fcn.00414440
push eax
push eax
call fcn.00411640
mov edx, str.help.txt
call fcn.004144f0
call fcn.00414550
push str.notepad.exe
call fcn.00414592
add dword [esp + 4], edx
call fcn.0040dd55
call fcn.004145b0
mov ebx, dword [0x494d08]
cmp ebx, 4
jne 0x407b95
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004129b2
and eax, eax
je 0x407b81
push 1
call fcn.00412860
push eax
call fcn.00412385
push 1
call fcn.00411624
push eax
call fcn.00412461
push 0x11
call fcn.00412478
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dd90
push eax
push 0x44e202
push 0
push 0
call fcn.0041248f
call fcn.00412418
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412ac7
push 0
call fcn.00412860
push eax
call fcn.00412385
push 0
call fcn.00412478
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dd90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041250f
push 0x11
call fcn.00412478
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412996
push eax
call fcn.004124dd
call fcn.00412418
push 1
call fcn.0041254a
push 0xff
push 0
call fcn.00412996
push eax
push 0
call fcn.004101c8
push eax
call fcn.004096d5
push 0x44e01d
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.0040dd6f
mov ebx, dword [0x494d08]
cmp ebx, 5
jne 0x407cf9
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004129b2
and eax, eax
je 0x407ce5
push 1
call fcn.00412860
push eax
call fcn.00412385
push 1
call fcn.00411624
push eax
call fcn.00412461
push 0x11
call fcn.00412478
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dd90
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.0041248f
call fcn.00412418
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412ac7
push 0
call fcn.00412860
push eax
call fcn.00412385
push 0
call fcn.00412478
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dd90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041250f
push 0x11
call fcn.00412478
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412996
push eax
call fcn.004124dd
call fcn.00412418
push 1
call fcn.0041254a
push 0xff
push 0
call fcn.00412996
push eax
push 0
call fcn.004101c8
push eax
call fcn.004096d5
push 0x44e01d
push str.www.cheathappens.com
push str.iexplore
call fcn.0040dd6f
mov ebx, dword [0x494d08]
cmp ebx, 6
jne 0x407e8c
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004129b2
and eax, eax
je 0x407e49
push 1
call fcn.00412860
push eax
call fcn.00412385
push 1
call fcn.00411624
push eax
call fcn.00412461
push 0x11
call fcn.00412478
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040dd90
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.0041248f
call fcn.00412418
push 0
push 0x64
push 0x1f4
push 1
call fcn.00412ac7
push 0
call fcn.00412860
push eax
call fcn.00412385
push 0
call fcn.00412478
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040dd90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.0041250f
push 0x11
call fcn.00412478
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00412996
push eax
call fcn.004124dd
call fcn.00412418
push 1
call fcn.0041254a
push 0xff
push 0
call fcn.00412996
push eax
push 0
call fcn.004101c8
push eax
call fcn.004096d5
call fcn.00414440
push eax
push 0x44e01d
call fcn.00414440
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.004144f0
mov edx, dword [0x494a94]
call fcn.004144f0
call fcn.00414550
push str.iexplore
call fcn.00414592
add dword [esp + 4], edx
call fcn.0040dd6f
call fcn.004145b0
mov ebx, dword [0x494d08]
cmp ebx, 7
jne 0x407eb5
mov ebp, dword [0x49518c]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x407eb5
mov ebx, dword [0x494d0c]
and ebx, ebx
jne 0x407eb5
mov eax, 1
jmp 0x407eb7
xor eax, eax
and eax, eax
je 0x40842d
push 0
push 0
call fcn.00410542
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x44e7ac]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.0040e180
fadd qword [0x44e7b4]
fistp dword [0x494d10]
mov ebx, dword [0x494d10]
and ebx, ebx
jle 0x407f18
mov ebx, dword [0x494d10]
cmp ebx, dword [0x494aa4]
jge 0x407f18
mov eax, 1
jmp 0x407f1a
xor eax, eax
and eax, eax
je 0x408221
push 1
push 0x44e12b
mov ebx, dword [0x494d10]
inc ebx
mov ebp, dword [0x49517c]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040b9f0
mov dword [0x494d14], eax
mov ebx, dword [0x494d10]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040b160
mov dword [0x494d18], eax
mov ebx, dword [0x494d18]
sub ebx, dword [0x494d14]
mov dword [0x494d1c], ebx
push 5
call fcn.0040ceb2
push 0x12c
call fcn.0040dda9
mov dword [0x494ab8], 0
mov eax, 0xff
cmp eax, dword [0x494ab8]
jl 0x407fb7
push dword [0x494ab8]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x494b14], eax
inc dword [0x494ab8]
jno 0x407f92
mov dword [0x494b14], 0
mov dword [0x494d20], 0
mov dword [0x494ab8], 3
mov eax, 0xff
cmp eax, dword [0x494ab8]
jl 0x40800e
push dword [0x494ab8]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x494b14], eax
mov ebx, dword [0x494b14]
and ebx, ebx
je 0x408006
mov eax, dword [0x494ab8]
mov dword [0x494d20], eax
inc dword [0x494ab8]
jno 0x407fd5
mov ebx, dword [0x494d20]
and ebx, ebx
jle 0x407f88
mov ebx, dword [0x494d20]
cmp ebx, 0x1b
jne 0x40817d
mov edx, 0x44e01d
lea ecx, [0x494a9c]
call fcn.0040b008
mov edx, 0x44e01d
lea ecx, [0x494aa0]
call fcn.0040b008
mov dword [0x494aa4], 0
call fcn.00414440
push eax
mov edx, dword [0x494a98]
call fcn.00414440
push eax
call fcn.004144f0
mov edx, str.Options
call fcn.004144f0
call fcn.00414550
push 0xa
call fcn.00414592
add dword [esp + 4], edx
call fcn.00411a90
call fcn.004145b0
call fcn.00414440
push eax
push eax
push 0xa
call fcn.00411b30
mov edx, 0x44e087
call fcn.004144f0
push 0x494a9c
call fcn.00414460
call fcn.00414440
push eax
push eax
push 0xa
call fcn.00411b30
push 0x494aa0
call fcn.00414460
call fcn.00414440
push eax
push eax
push 0xa
call fcn.00411b30
mov ebx, dword [0x494aa4]
inc ebx
mov ebp, dword [0x49517c]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00414460
inc dword [0x494aa4]
push 0xa
call fcn.00411c70
mov ebx, eax
cmp ebx, 1
jne 0x4080d3
push 0xa
call fcn.004118c0
push 1
call fcn.0040ceb2
push 0x12c
call fcn.0040dda9
mov dword [0x494ab8], 1
mov eax, 0x14
cmp eax, dword [0x494ab8]
jl 0x408178
mov ebx, dword [0x494ab8]
mov ebp, dword [0x4951ac]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x494ab8]
mov ebp, dword [0x49518c]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x494ab8]
jno 0x40813d
jmp 0x408221
push 0x64
call fcn.0040dda9
call fcn.00414440
push eax
mov edx, 0x44e4f2
call fcn.004144f0
mov ebx, dword [0x494d20]
mov ebp, dword [0x495184]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.004144f0
mov edx, 0x44e12b
call fcn.004144f0
call fcn.00414440
push eax
push eax
push dword [0x494d1c]
mov ebx, dword [0x494d10]
inc ebx
mov ebp, dword [0x49517c]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040b6b0
pop eax
mov ebx, dword [0x494d10]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00414460
push dword [0x494d20]
mov ebx, dword [0x494d10]
mov ebp, dword [0x49518c]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.0040ceb2
push 0x12c
call fcn.0040dda9
push 0x120
fld dword [0x494aac]
push eax
fistp dword [esp]
fld dword [0x494aa8]
push eax
fistp dword [esp]
push 1
call fcn.004129b2
and eax, eax
je 0x40842d
push 0
call fcn.00412860
push eax
call fcn.00412385
push 0
call fcn.00412478
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040dd90
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.0041250f
call fcn.00412418
push 1
call fcn.00412860
push eax
call fcn.00412385
push 1
call fcn.00411624
push eax
call fcn.00412461
push 0x11
call fcn.00412478
mov dword [0x494ab8], 1
mov eax, dword [0x494aa4]
cmp eax, dword [0x494ab8]
jl 0x40832b
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040dd90
push eax
mov ebx, dword [0x494ab8]
mov ebp, dword [0x49517c]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x494ab8]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.0041248f
inc dword [0x494ab8]
jno 0x4082d2
mov dword [0x494ab8], 1
mov eax, dword [0x494aa4]
cmp eax, dword [0x494ab8]
jl 0x40838e
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040dd90
push eax
mov ebx, dword [0x494ab8]
mov ebp, dword [0x49517c]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x494ab8]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.0041248f
inc dword [0x494ab8]
jno 0x408335
call fcn.00412418
push 0
fld dword [0x494ab4]
push eax
fistp dword [esp]
fld dword [0x494ab0]
push eax
fistp dword [esp]
push 1
call fcn.00412ac7
push 0
call fcn.00412860
push eax
call fcn.00412385
push 0x11
call fcn.00412478
fld dword [0x494ab4]
push eax
fistp dword [esp]
fld dword [0x494ab0]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.00412996
push eax
call fcn.004124dd
call fcn.00412418
push 1
call fcn.0041254a
push 0xff
push 0
call fcn.00412996
push eax
push 0
call fcn.004101c8
push eax
call fcn.004096d5
mov ebx, dword [0x494a80]
cmp ebx, 0x201
jne 0x4084ab
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.004102da
call fcn.00410533
mov dword [0x494d08], eax
mov ebx, dword [0x494d08]
cmp ebx, 2
jne 0x40846e
push 0
call fcn.004105a9
mov dword [0x494d24], eax
push 0
call fcn.00410542
mov dword [0x494d28], eax
push 0
push 2
push 0xa1
push 0
call fcn.004101c8
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x4084ba
push 0x55009553
ret
ret