Function at 0x45de00
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
mov esi, ecx
mov ebx, 1
mov ecx, dword [ebp + 8]
push edi
mov dword [ebp - 8], esi
lea eax, [ecx - 8]
cmp eax, 0x4e
ja case.0x45de29.10
movzx eax, byte [eax + 0x45e20c]
jmp dword [eax*4 + 0x45e1dc]
mov ecx, dword [esi + 0x9c]
cmp ecx, dword [esi + 0x8c]
jge case.0x45de29.8
mov eax, dword [esi + 0x80]
push 0
add eax, ecx
push 1
push eax
call sub.Engine.dll_TSplitString
mov ecx, dword [esi + 0x9c]
mov ebx, eax
sub dword [esi + 0x8c], ebx
mov edx, dword [esi + 0x80]
mov edi, dword [esi + 0x8c]
add edx, ecx
sub edi, ecx
inc edi
push edi
lea eax, [edx + ebx]
push eax
push edx
call dword [sym.imp.MSVCR120.dll_memmove]
mov eax, dword [esi]
add esp, 0x18
mov ecx, esi
call dword [eax + 4]
pop edi
mov ebx, 1
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [esi + 0x9c]
test eax, eax
je case.0x45de29.8
push 1
dec eax
push eax
push dword [esi + 0x80]
call sub.Engine.dll_TSplitString
add esp, 0xc
mov dword [esi + 0x9c], eax
mov ecx, esi
call fcn.0045d5a0
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi + 0x9c]
cmp ecx, dword [esi + 0x8c]
jge case.0x45de29.8
mov eax, dword [esi + 0x80]
push 0
add eax, ecx
push 1
push eax
call sub.Engine.dll_TSplitString
add dword [esi + 0x9c], eax
add esp, 0xc
mov ecx, esi
call fcn.0045d5a0
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, esi
mov dword [esi + 0x9c], 0
call fcn.0045d5a0
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [esi + 0x8c]
mov ecx, esi
mov dword [esi + 0x9c], eax
call fcn.0045d5a0
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
test byte [esi + 0x78], 0x20
je 0x45e00c
mov ecx, dword [esi + 0x98]
test ecx, ecx
je 0x45e00c
mov eax, dword [esi + 0x10]
xor edi, edi
add eax, eax
mov dword [ebp + 8], 0
cdq
xor ebx, ebx
idiv dword [esi + 0x7c]
mov dword [ebp - 0xc], eax
test ecx, ecx
jle 0x45dfb0
mov ecx, dword [esi + 0x80]
mov ebx, ecx
mov esi, dword [esi + 0x98]
mov dword [ebp - 4], esi
mov edi, edi
push eax
lea eax, [ebx + edi]
mov dword [ebp + 8], edi
push 1
push eax
call fcn.0045e800
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0xc]
dec esi
jne 0x45df90
mov esi, dword [ebp - 8]
mov ebx, dword [ebp - 4]
mov eax, dword [esi + 0x9c]
sub eax, edi
push 0
push eax
mov eax, dword [esi + 0x80]
add eax, dword [ebp + 8]
push eax
call sub.Engine.dll_TSplitString
add eax, dword [ebp + 8]
add esp, 0xc
mov dword [esi + 0x9c], eax
cmp eax, edi
jl 0x45dffa
test edi, edi
je 0x45dffa
mov eax, dword [esi + 0x80]
mov dword [esi + 0x9c], edi
cmp byte [eax + edi - 1], 0xa
jne 0x45dffa
lea eax, [edi - 1]
mov dword [esi + 0x9c], eax
mov ecx, esi
call fcn.0045d5a0
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi + 0x70]
test ecx, ecx
je case.0x45de29.8
mov eax, dword [ecx]
push 0x26
push esi
push 0x62e
call dword [eax + 0xc]
pop edi
mov ebx, eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
test byte [esi + 0x78], 0x20
je 0x45e0cd
mov eax, dword [esi + 0x10]
xor ecx, ecx
add eax, eax
xor edi, edi
cdq
xor ebx, ebx
idiv dword [esi + 0x7c]
mov edx, dword [esi + 0x98]
mov dword [ebp + 8], eax
test edx, edx
js 0x45e089
mov eax, dword [esi + 0x80]
lea esi, [edx + 1]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov dword [ebp - 4], esi
push ebx
add eax, edi
mov dword [ebp - 0x10], edi
push 1
push eax
call fcn.0045e800
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0xc]
dec esi
jne 0x45e067
mov esi, dword [ebp - 8]
mov ebx, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 0x9c]
sub eax, ecx
push 0
push eax
mov eax, dword [esi + 0x80]
add eax, edi
push eax
call sub.Engine.dll_TSplitString
push dword [ebp + 8]
add eax, edi
mov dword [esi + 0x9c], eax
mov eax, dword [esi + 0x80]
add eax, edi
push 1
push eax
call fcn.0045e800
add edi, eax
add esp, 0x18
cmp dword [esi + 0x9c], edi
jmp 0x45dfd8
mov ecx, dword [esi + 0x70]
test ecx, ecx
je case.0x45de29.8
mov eax, dword [ecx]
push 0x28
push esi
push 0x62e
call dword [eax + 0xc]
pop edi
mov ebx, eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edx, dword [esi + 0x70]
test edx, edx
je case.0x45de29.8
mov eax, dword [edx]
push ecx
push esi
push 0x62e
mov ecx, edx
call dword [eax + 0xc]
pop edi
mov ebx, eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esi + 0x70]
test ecx, ecx
je case.0x45de29.8
test byte [esi + 0x78], 0x20
je 0x45e14a
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
call edi
mov ecx, 0x8000
test cx, ax
jne 0x45e162
push 0x10
call edi
mov ecx, 0x8000
test cx, ax
jne 0x45e162
mov ecx, dword [esi + 0x70]
mov eax, dword [ecx]
push 0xd
push esi
push 0x62e
call dword [eax + 0xc]
pop edi
mov ebx, eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0
push 0xa
mov ecx, esi
call fcn.0045db80
test eax, eax
je case.0x45de29.8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 0x8000
test cx, ax
je case.0x45de29.8
mov ecx, esi
call fcn.0045e610
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp ecx, 0x30
jl 0x45e1b1
cmp ecx, 0x39
jle case.0x45de29.8
cmp ecx, 0x41
jl 0x45e1bb
cmp ecx, 0x5a
jle case.0x45de29.8
cmp ecx, 0x60
jl 0x45e1c5
cmp ecx, 0x6f
jle case.0x45de29.8
mov dword [esi + 0x74], 0
xor ebx, ebx
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8