Function at 0x10006e60
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001efee
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x10027100]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x1000710a
cmp eax, 0x482
ja 0x10007060
je 0x100070fe
cmp eax, 0x202
ja 0x10006ff5
je 0x10006fcd
cmp eax, 0xc
je 0x10006fb3
cmp eax, 0x100
jne 0x1000710a
cmp edx, 0xd
jne 0x10006f1a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xa8]
cmp eax, 0x1f4
jbe 0x1000710a
call fcn.10007f70
mov eax, dword [esi + 0x94]
push 0
push eax
push 0xd
push 0x998
call fcn.10004df0
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp edx, 0x54
jne 0x10006f62
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
call edi
test al, al
js 0x1000710a
push 0x11
call edi
test al, al
jns 0x1000710a
push 0x12
call edi
test al, al
js 0x1000710a
call fcn.10007f70
mov ecx, dword [esi + 0x94]
push 0
push 0
push 0x48d
jmp 0x10007103
cmp edx, 0x4e
jne 0x1000710a
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x10
call esi
test al, al
js 0x1000710a
push 0x11
call esi
test al, al
jns 0x1000710a
push 0x12
call esi
test al, al
js 0x1000710a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1002a1f0], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov ecx, edi
call fcn.100085d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, edi
mov edi, esi
mov dword [esi + 0xb4], eax
call fcn.10008e90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
cmp eax, 0x210
jne 0x1000710a
cmp dl, 1
jne 0x1000710a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xb4]
cmp eax, 0x64
jae 0x1000710a
lea edx, [ebp + 0xc]
push edx
mov ecx, 0x10022c24
call fcn.10002300
mov dword [ebp - 4], 0
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.10008090
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
push ecx
call fcn.10004150
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
mov edx, eax
sub edx, 0x484
je 0x100070fe
sub edx, 9
je 0x100070bc
dec edx
jne 0x1000710a
lea edx, [ebp + 8]
push edx
mov ecx, 0x10022790
call fcn.10002300
mov dword [ebp - 4], 2
lea eax, [ebp + 8]
push eax
push esi
call fcn.10008090
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
push ecx
call fcn.10004150
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
lea edx, [ebp - 0x10]
push edx
mov ecx, 0x10022c24
call fcn.10002300
mov dword [ebp - 4], 1
lea eax, [ebp - 0x10]
push eax
push esi
call fcn.10008090
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
push ecx
call fcn.10004150
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8
push 0
push 0
push eax
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 8