Function at 0x407c25
Capabilities:
Log keystrokes via polling

Disassembly:
push 0
call fcn.004113ac
mov ebx, eax
add ebx, 0x133
mov dword [0x4a50d0], ebx
push 0
call fcn.00411413
mov ebx, eax
add ebx, 0x14f
mov dword [0x4a50d4], ebx
push 0xffff0001
push 0xffff0001
push dword [0x4a50d4]
push dword [0x4a50d0]
push 1
call fcn.00411421
push 0xa
call fcn.00411524
mov dword [0x4a4e48], eax
call fcn.004116ac
mov ebx, eax
and ebx, ebx
jne 0x4088d6
mov dword [0x4a50d8], 0
mov ebx, dword [0x4a4e48]
cmp ebx, 0x332c
jne 0x408858
call fcn.004116bb
mov dword [0x4a50d8], eax
mov ebx, dword [0x4a50d8]
cmp ebx, 1
jne 0x407cc9
jmp 0x409ab8
mov ebx, dword [0x4a50d8]
cmp ebx, 3
jne 0x407e5c
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x407e19
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Trainer_Instructions.
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
call fcn.00416120
push eax
push 0
push 0x45102a
call fcn.00416120
push eax
push eax
call fcn.00412ae4
mov edx, str.help.txt
call fcn.004161f0
call fcn.00416250
push str.notepad.exe
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040ef92
call fcn.004162b0
mov ebx, dword [0x4a50d8]
cmp ebx, 4
jne 0x407fc0
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x407fac
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push 0x451221
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
push 0x45102a
push str.www.cheathappens.com_trainer_troubleshooting.asp
push str.iexplore
call fcn.0040efac
mov ebx, dword [0x4a50d8]
cmp ebx, 5
jne 0x408124
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x408110
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
push 0x45102a
push str.www.cheathappens.com
push str.iexplore
call fcn.0040efac
mov ebx, dword [0x4a50d8]
cmp ebx, 6
jne 0x4082b7
push 0x120
push 0xdc
push 0x44c
push 1
call fcn.004141e6
and eax, eax
je 0x408274
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
push 0xff
push 0xa
push 0xa
mov eax, 0xa
call fcn.0040efd0
push eax
push str.Cheathappens_Website.
push 0
push 0
call fcn.00413c9e
call fcn.00413c27
push 0
push 0x64
push 0x1f4
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x2f
push 0xa2
mov eax, 0xf2
call fcn.0040efd0
push eax
push 0x18
push 0x202
push 0x1c2
push 1
call fcn.00413d22
push 0x11
call fcn.00413c87
push 0x64
push 0x1f4
push 0x1c5
push 5
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
call fcn.00416120
push eax
push 0x45102a
call fcn.00416120
push eax
mov edx, str.http:__www.cheathappens.com_cheat_index.asp_titleID
call fcn.004161f0
mov edx, dword [0x4a4e5c]
call fcn.004161f0
call fcn.00416250
push str.iexplore
call fcn.00416292
add dword [esp + 4], edx
call fcn.0040efac
call fcn.004162b0
mov ebx, dword [0x4a50d8]
cmp ebx, 7
jne 0x4082e0
mov ebp, dword [0x4a5588]
mov ebx, dword [ebp + 4]
and ebx, ebx
je 0x4082e0
mov ebx, dword [0x4a50dc]
and ebx, ebx
jne 0x4082e0
mov eax, 1
jmp 0x4082e2
xor eax, eax
and eax, eax
je 0x408858
push 0
push 0
call fcn.004116ca
mov dword [esp - 4], eax
fild dword [esp - 4]
fadd dword [0x4517f8]
fdiv dword [str.33GA]
sub esp, 4
fstp dword [esp]
call fcn.0040f190
fadd qword [0x451800]
fistp dword [0x4a50e0]
mov ebx, dword [0x4a50e0]
and ebx, ebx
jle 0x408343
mov ebx, dword [0x4a50e0]
cmp ebx, dword [0x4a4e6c]
jge 0x408343
mov eax, 1
jmp 0x408345
xor eax, eax
and eax, eax
je 0x40864c
push 1
push 0x45114a
mov ebx, dword [0x4a50e0]
inc ebx
mov ebp, dword [0x4a5570]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040cbe0
mov dword [0x4a50e4], eax
mov ebx, dword [0x4a50e0]
inc ebx
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040c1d0
mov dword [0x4a50e8], eax
mov ebx, dword [0x4a50e8]
sub ebx, dword [0x4a50e4]
mov dword [0x4a50ec], ebx
push 5
call fcn.0040e014
push 0x12c
call fcn.0040efe9
mov dword [0x4a4e80], 0
mov eax, 0xff
cmp eax, dword [0x4a4e80]
jl 0x4083e2
push dword [0x4a4e80]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a4ee4], eax
inc dword [0x4a4e80]
jno 0x4083bd
mov dword [0x4a4ee4], 0
mov dword [0x4a50f0], 0
mov dword [0x4a4e80], 3
mov eax, 0xff
cmp eax, dword [0x4a4e80]
jl 0x408439
push dword [0x4a4e80]
call sub.USER32.DLL_GetAsyncKeyState
mov dword [0x4a4ee4], eax
mov ebx, dword [0x4a4ee4]
and ebx, ebx
je 0x408431
mov eax, dword [0x4a4e80]
mov dword [0x4a50f0], eax
inc dword [0x4a4e80]
jno 0x408400
mov ebx, dword [0x4a50f0]
and ebx, ebx
jle 0x4083b3
mov ebx, dword [0x4a50f0]
cmp ebx, 0x1b
jne 0x4085a8
mov edx, 0x45102a
lea ecx, [0x4a4e64]
call fcn.0040c008
mov edx, 0x45102a
lea ecx, [0x4a4e68]
call fcn.0040c008
mov dword [0x4a4e6c], 0
call fcn.00416120
push eax
mov edx, dword [0x4a4e60]
call fcn.00416120
push eax
call fcn.004161f0
mov edx, str.Options
call fcn.004161f0
call fcn.00416250
push 0xa
call fcn.00416292
add dword [esp + 4], edx
call fcn.00413080
call fcn.004162b0
call fcn.00416120
push eax
push eax
push 0xa
call fcn.00413240
mov edx, 0x45109e
call fcn.004161f0
push 0x4a4e64
call fcn.00416160
call fcn.00416120
push eax
push eax
push 0xa
call fcn.00413240
push 0x4a4e68
call fcn.00416160
call fcn.00416120
push eax
push eax
push 0xa
call fcn.00413240
mov ebx, dword [0x4a4e6c]
inc ebx
mov ebp, dword [0x4a5570]
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00416160
inc dword [0x4a4e6c]
push 0xa
call fcn.00413380
mov ebx, eax
cmp ebx, 1
jne 0x4084fe
push 0xa
call fcn.00412d90
push 1
call fcn.0040e014
push 0x12c
call fcn.0040efe9
mov dword [0x4a4e80], 1
mov eax, 0x14
cmp eax, dword [0x4a4e80]
jl 0x4085a3
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a55a8]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5588]
shl ebx, 2
pop dword [ebp + ebx]
inc dword [0x4a4e80]
jno 0x408568
jmp 0x40864c
push 0x64
call fcn.0040efe9
call fcn.00416120
push eax
mov edx, 0x451535
call fcn.004161f0
mov ebx, dword [0x4a50f0]
mov ebp, dword [0x4a5578]
shl ebx, 2
mov edx, dword [ebp + ebx]
call fcn.004161f0
mov edx, 0x45114a
call fcn.004161f0
call fcn.00416120
push eax
push eax
push dword [0x4a50ec]
mov ebx, dword [0x4a50e0]
inc ebx
mov ebp, dword [0x4a5570]
shl ebx, 2
push dword [ebp + ebx]
call fcn.0040c700
pop eax
mov ebx, dword [0x4a50e0]
inc ebx
shl ebx, 2
lea eax, [ebp + ebx]
push eax
call fcn.00416160
push dword [0x4a50f0]
mov ebx, dword [0x4a50e0]
mov ebp, dword [0x4a5588]
shl ebx, 2
pop dword [ebp + ebx]
push 0
call fcn.0040e014
push 0x12c
call fcn.0040efe9
push 0x120
fld dword [0x4a4e74]
push eax
fistp dword [esp]
fld dword [0x4a4e70]
push eax
fistp dword [esp]
push 1
call fcn.004141e6
and eax, eax
je 0x408858
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0
call fcn.00413c87
push 0xff
push 0x44
push 0x44
mov eax, 0x44
call fcn.0040efd0
push eax
push 0x10e
push 0x12b
push 0x41
push 2
call fcn.00413d22
call fcn.00413c27
push 1
call fcn.00414094
push eax
call fcn.00413b94
push 1
call fcn.00412ac8
push eax
call fcn.00413c70
push 0x11
call fcn.00413c87
mov dword [0x4a4e80], 1
mov eax, dword [0x4a4e6c]
cmp eax, dword [0x4a4e80]
jl 0x408756
push 0xff
push 0
push 0
mov eax, 0
call fcn.0040efd0
push eax
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5570]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4e80]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe8
push ebx
push 2
call fcn.00413c9e
inc dword [0x4a4e80]
jno 0x4086fd
mov dword [0x4a4e80], 1
mov eax, dword [0x4a4e6c]
cmp eax, dword [0x4a4e80]
jl 0x4087b9
push 0xff
push 0xff
push 0xff
mov eax, 0xff
call fcn.0040efd0
push eax
mov ebx, dword [0x4a4e80]
mov ebp, dword [0x4a5570]
shl ebx, 2
push dword [ebp + ebx]
mov ebx, dword [0x4a4e80]
imul ebx, ebx, 0x1a
add ebx, 0xffffffe6
push ebx
push 0
call fcn.00413c9e
inc dword [0x4a4e80]
jno 0x408760
call fcn.00413c27
push 0
fld dword [0x4a4e7c]
push eax
fistp dword [esp]
fld dword [0x4a4e78]
push eax
fistp dword [esp]
push 1
call fcn.004142fc
push 0
call fcn.00414094
push eax
call fcn.00413b94
push 0x11
call fcn.00413c87
fld dword [0x4a4e7c]
push eax
fistp dword [esp]
fld dword [0x4a4e78]
push eax
fistp dword [esp]
push 0x43
push 7
push 1
call fcn.004141ca
push eax
call fcn.00413cf0
call fcn.00413c27
push 1
call fcn.00413d5f
push 0xff
push 0
call fcn.004141ca
push eax
push 0
call fcn.00411293
push eax
call fcn.00409bca
mov ebx, dword [0x4a4e48]
cmp ebx, 0x201
jne 0x4088d6
push 0xffff0001
push 0xffff0001
push 0
push 0xfffffc18
push 1
call fcn.00411421
call fcn.004116bb
mov dword [0x4a50d8], eax
mov ebx, dword [0x4a50d8]
cmp ebx, 2
jne 0x408899
push 0
call fcn.00411731
mov dword [0x4a50f4], eax
push 0
call fcn.004116ca
mov dword [0x4a50f8], eax
push 0
push 2
push 0xa1
push 0
call fcn.00411293
push eax
call sub.USER32.DLL_SendMessageA
call sub.KERNEL32.dll_IsDebuggerPresent
and eax, eax
je 0x4088e5
push 0x55009553
ret
ret