Function at 0x408256
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.004117de
mov ebx, eax
add ebx, 0x133
mov dword [0x49c528], ebx
push 0
call fcn.00411823
mov ebx, eax
add ebx, 0x14f
mov dword [0x49c52c], ebx
push 0xffff0001
push 0xffff0001
push dword [0x49c52c]
push dword [0x49c528]
push 1
call fcn.00411868
push 0xa
call fcn.0041196b
mov dword [0x49c230], eax
call fcn.00411ab2
mov ebx, eax
and ebx, ebx
jne 0x408f07
mov dword [0x49c530], 0
mov ebx, dword [0x49c230]
cmp ebx, 0x332c
jne 0x408e89
call fcn.00411ac1
mov dword [0x49c530], eax
mov ebx, dword [0x49c530]
cmp ebx, 1
jne 0x4082fa
jmp 0x40a0e9
mov ebx, dword [0x49c530]
cmp ebx, 3
jne 0x40848d
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413f52
and eax, eax
je 0x40844a
push 1
call fcn.00413e00
push eax
call fcn.00413925
push 1
call fcn.00412bc8
push eax
call fcn.00413a01
push 0x11
call fcn.00413a18
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040ed90
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.00413a2f
call fcn.004139b8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00414067
push 0
call fcn.00413e00
push eax
call fcn.00413925
push 0
call fcn.00413a18
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040ed90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413aaf
push 0x11
call fcn.00413a18
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00413f36
push eax
call fcn.00413a7d
call fcn.004139b8
push 1
call fcn.00413aea
push 0xff
push 0
call fcn.00413f36
push eax
push 0
call fcn.0041174e
push eax
call fcn.0040a131
call fcn.004159e0
push eax
push 0
push 0x44f01d
call fcn.004159e0
push eax
push eax
call fcn.00412be4
mov edx, str.help.txt
call fcn.00415a90
call fcn.00415af0
push str.notepad.exe
call fcn.00415b32
add dword [esp + 4], edx
call fcn.0040ed55
call fcn.00415b50
mov ebx, dword [0x49c530]
cmp ebx, 4
jne 0x4085f1
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413f52
and eax, eax
je 0x4085dd
push 1
call fcn.00413e00
push eax
call fcn.00413925
push 1
call fcn.00412bc8
push eax
call fcn.00413a01
push 0x11
call fcn.00413a18
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040ed90
push eax
push 0x44f261
push 0
push 0
call fcn.00413a2f
call fcn.004139b8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00414067
push 0
call fcn.00413e00
push eax
call fcn.00413925
push 0
call fcn.00413a18
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040ed90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413aaf
push 0x11
call fcn.00413a18
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00413f36
push eax
call fcn.00413a7d
call fcn.004139b8
push 1
call fcn.00413aea
push 0xff
push 0
call fcn.00413f36
push eax
push 0
call fcn.0041174e
push eax
call fcn.0040a131
push 0x44f01d
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.0040ed6f
mov ebx, dword [0x49c530]
cmp ebx, 5
jne 0x408755
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413f52
and eax, eax
je 0x408741
push 1
call fcn.00413e00
push eax
call fcn.00413925
push 1
call fcn.00412bc8
push eax
call fcn.00413a01
push 0x11
call fcn.00413a18
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040ed90
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00413a2f
call fcn.004139b8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00414067
push 0
call fcn.00413e00
push eax
call fcn.00413925
push 0
call fcn.00413a18
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040ed90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413aaf
push 0x11
call fcn.00413a18
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00413f36
push eax
call fcn.00413a7d
call fcn.004139b8
push 1
call fcn.00413aea
push 0xff
push 0
call fcn.00413f36
push eax
push 0
call fcn.0041174e
push eax
call fcn.0040a131
push 0x44f01d
push str.www.cheathappens.com
push str.iexplore
call fcn.0040ed6f
mov ebx, dword [0x49c530]
cmp ebx, 6
jne 0x4088e8
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.00413f52
and eax, eax
je 0x4088a5
push 1
call fcn.00413e00
push eax
call fcn.00413925
push 1
call fcn.00412bc8
push eax
call fcn.00413a01
push 0x11
call fcn.00413a18
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040ed90
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00413a2f
call fcn.004139b8
push 0
push 0x64
push 0x1f4
push 1
call fcn.00414067
push 0
call fcn.00413e00
push eax
call fcn.00413925
push 0
call fcn.00413a18
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040ed90
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413aaf
push 0x11
call fcn.00413a18
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.00413f36
push eax
call fcn.00413a7d
call fcn.004139b8
push 1
call fcn.00413aea
push 0xff
push 0
call fcn.00413f36
push eax
push 0
call fcn.0041174e
push eax
call fcn.0040a131
call fcn.004159e0
push eax
push 0x44f01d
call fcn.004159e0
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.00415a90
mov edx, dword [0x49c244]
call fcn.00415a90
call fcn.00415af0
push str.iexplore
call fcn.00415b32
add dword [esp + 4], edx
call fcn.0040ed6f
call fcn.00415b50
mov ebx, dword [0x49c530]
cmp ebx, 7
jne 0x408911
mov ebp, dword [0x49c9c8]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x408911
mov ebx, dword [0x49c534]
and ebx, ebx
jne 0x408911
mov eax, 1
jmp 0x408913
xor eax, eax
and eax, eax
je 0x408e89
push 0
push 0
call fcn.00411ad0
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x44f8e8]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.0040f170
fadd qword [0x44f8f0]
fistp dword [0x49c538]
mov ebx, dword [0x49c538]
and ebx, ebx
jle 0x408974
mov ebx, dword [0x49c538]
cmp ebx, dword [0x49c254]
jge 0x408974
mov eax, 1
jmp 0x408976
xor eax, eax
and eax, eax
je 0x408c7d
push 1
push 0x44f14b
mov ebx, dword [0x49c538]
inc ebx
mov ebp, dword [0x49c9b8]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040ca70
mov dword [0x49c53c], eax
mov ebx, dword [0x49c538]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040c160
mov dword [0x49c540], eax
mov ebx, dword [0x49c540]
sub ebx, dword [0x49c53c]
mov dword [0x49c544], ebx
push 5
call fcn.0040deb2
push 0x12c
call fcn.0040eda9
mov dword [0x49c268], 0
mov eax, 0xff
cmp eax, dword [0x49c268]
jl 0x408a13
push dword [0x49c268]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x49c2c4], eax
inc dword [0x49c268]
jno 0x4089ee
mov dword [0x49c2c4], 0
mov dword [0x49c548], 0
mov dword [0x49c268], 3
mov eax, 0xff
cmp eax, dword [0x49c268]
jl 0x408a6a
push dword [0x49c268]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x49c2c4], eax
mov ebx, dword [0x49c2c4]
and ebx, ebx
je 0x408a62
mov eax, dword [0x49c268]
mov dword [0x49c548], eax
inc dword [0x49c268]
jno 0x408a31
mov ebx, dword [0x49c548]
and ebx, ebx
jle 0x4089e4
mov ebx, dword [0x49c548]
cmp ebx, 0x1b
jne 0x408bd9
mov edx, 0x44f01d
lea ecx, [0x49c24c]
call fcn.0040c008
mov edx, 0x44f01d
lea ecx, [0x49c250]
call fcn.0040c008
mov dword [0x49c254], 0
call fcn.004159e0
push eax
mov edx, dword [0x49c248]
call fcn.004159e0
push eax
call fcn.00415a90
mov edx, str.Options
call fcn.00415a90
call fcn.00415af0
push 0xa
call fcn.00415b32
add dword [esp + 4], edx
call fcn.00413030
call fcn.00415b50
call fcn.004159e0
push eax
push eax
push 0xa
call fcn.004130d0
mov edx, 0x44f087
call fcn.00415a90
push 0x49c24c
call fcn.00415a00
call fcn.004159e0
push eax
push eax
push 0xa
call fcn.004130d0
push 0x49c250
call fcn.00415a00
call fcn.004159e0
push eax
push eax
push 0xa
call fcn.004130d0
mov ebx, dword [0x49c254]
inc ebx
mov ebp, dword [0x49c9b8]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00415a00
inc dword [0x49c254]
push 0xa
call fcn.00413210
mov ebx, eax
cmp ebx, 1
jne 0x408b2f
push 0xa
call fcn.00412e60
push 1
call fcn.0040deb2
push 0x12c
call fcn.0040eda9
mov dword [0x49c268], 1
mov eax, 0x14
cmp eax, dword [0x49c268]
jl 0x408bd4
mov ebx, dword [0x49c268]
mov ebp, dword [0x49c9e8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x49c268]
mov ebp, dword [0x49c9c8]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x49c268]
jno 0x408b99
jmp 0x408c7d
push 0x64
call fcn.0040eda9
call fcn.004159e0
push eax
mov edx, 0x44f5fe
call fcn.00415a90
mov ebx, dword [0x49c548]
mov ebp, dword [0x49c9c0]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.00415a90
mov edx, 0x44f14b
call fcn.00415a90
call fcn.004159e0
push eax
push eax
push dword [0x49c544]
mov ebx, dword [0x49c538]
inc ebx
mov ebp, dword [0x49c9b8]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040c6b0
pop eax
mov ebx, dword [0x49c538]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00415a00
push dword [0x49c548]
mov ebx, dword [0x49c538]
mov ebp, dword [0x49c9c8]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.0040deb2
push 0x12c
call fcn.0040eda9
push 0x120
fld dword [0x49c25c]
push eax
fistp dword [esp]
fld dword [0x49c258]
push eax
fistp dword [esp]
push 1
call fcn.00413f52
and eax, eax
je 0x408e89
push 0
call fcn.00413e00
push eax
call fcn.00413925
push 0
call fcn.00413a18
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040ed90
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.00413aaf
call fcn.004139b8
push 1
call fcn.00413e00
push eax
call fcn.00413925
push 1
call fcn.00412bc8
push eax
call fcn.00413a01
push 0x11
call fcn.00413a18
mov dword [0x49c268], 1
mov eax, dword [0x49c254]
cmp eax, dword [0x49c268]
jl 0x408d87
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040ed90
push eax
mov ebx, dword [0x49c268]
mov ebp, dword [0x49c9b8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x49c268]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00413a2f
inc dword [0x49c268]
jno 0x408d2e
mov dword [0x49c268], 1
mov eax, dword [0x49c254]
cmp eax, dword [0x49c268]
jl 0x408dea
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040ed90
push eax
mov ebx, dword [0x49c268]
mov ebp, dword [0x49c9b8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x49c268]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00413a2f
inc dword [0x49c268]
jno 0x408d91
call fcn.004139b8
push 0
fld dword [0x49c264]
push eax
fistp dword [esp]
fld dword [0x49c260]
push eax
fistp dword [esp]
push 1
call fcn.00414067
push 0
call fcn.00413e00
push eax
call fcn.00413925
push 0x11
call fcn.00413a18
fld dword [0x49c264]
push eax
fistp dword [esp]
fld dword [0x49c260]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.00413f36
push eax
call fcn.00413a7d
call fcn.004139b8
push 1
call fcn.00413aea
push 0xff
push 0
call fcn.00413f36
push eax
push 0
call fcn.0041174e
push eax
call fcn.0040a131
mov ebx, dword [0x49c230]
cmp ebx, 0x201
jne 0x408f07
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.00411868
call fcn.00411ac1
mov dword [0x49c530], eax
mov ebx, dword [0x49c530]
cmp ebx, 2
jne 0x408eca
push 0
call fcn.00411b37
mov dword [0x49c54c], eax
push 0
call fcn.00411ad0
mov dword [0x49c550], eax
push 0
push 2
push 0xa1
push 0
call fcn.0041174e
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x408f16
push 0x55009553
ret
ret